Windows Forensics and Incident Recovery, Carvey, Harlan