Investigating Windows Systems for Forensics Evidence © Joe Cleetus Concurrent Engineering Research Center, Lane Dept of Computer Science and Engineering,