title: Finding out actions made at a specific date or time
body: <p>We have a few candidates at our workplace who we have found to be torrenting. (Using proxies I assume to download software etc).</p>
  
  <p>They have however left their torrents on there which have a date and time of initiation. 
  Is it possible to check other documents made or opened at that time area?</p>
  
  <p>Thanks</p>