Q75
Single choice
An analyst needs to identify the applications a user was running and the files that were open before the user's computer was shut off by holding down the power button.
Which of the following would MOST likely contain that information?