How can operating system data be used to track criminalactivity? Use specific ex

How can operating system data be used to track criminalactivity? Use specific examples of operating system information(i.e. an Internet history cache) in your response.