If you were an incident responder, and you wanted to find out what a hacker had changed on a client computer, what files would you look at and what forensic tools would you use? Create 6 to 8 sentences to answer the question, give opinions, and add experiences.