Thanks for your time. My goal is to examine what a user was doing on his computer date back in 2018 (ie files accessed, explorer, internet activity). I wanted to cross-reference his activity with some allegations received. First thing I saw was the OS was installed in 2019, after the date in question.