SMS dit: Windows forensic analysis