 registry files, link files, unallocated space.These are controlled or created by the computer and not the user).The objective of reviewing the user created data is to find information that may be used to base decisions on as part of an investigation.