er searches Google for "latest on omar amanat" 85 User opens file from IE named "nysd-1_2015-cr-00536-446092-00792(11pdr -- SENTENCING MEMORANDUM OF OMAR AMANAT 86 User launches GroupWise (grpwise.exe) 87 Screen Pass is Executed by System/User - Computer System is Locked 88 Computer is unlocked by user 8OP