An old (2010) video showing how Windows 7 audit data can be used to determine how sensitive documents were exfiltrated from a computer and by whom. In this case, the "fictional" Navy traitors John Walker and Jerry Whitworth conspire to steal the data.
