Windows Forensics: A Case Study, Part One