Lesson 1: Figuring out Forensics: Organization and Observation