while investigating a claim of a user downloading illegal material the investigator goes through the files on the suspect’s workstation