Investigators don't simply search through documents when they check a computer. They recollect events. Each login or download, each browser session, or deleted file, along...