Remote access forensics for VNC and RDP on Windows platform