Friday Forensics challenge, because @HighViscosity stumped me today: why does both the $LogFile and $UsnJrnl exist?