If you filter the shellbag data by Value, and review the order of the timestamps (in standard and military time), what conclusions can be drawn about how the folder Shield Documents made its what on to the system, where it was first stored, and the ways the folder may have been removed from the system?