Exercise: Digital Forensics

QUESTION:

Your team just received a tip reporting a potential crime plot. One of the culprits involved used the Windows 10 machine in your lab environment last week and you’ve been given permission to investigate. Explore the evidence the criminal left behind to try and piece together the kind of crime he was planning. Where are they planning the crime? What materials might they be collecting in preparation?