renamed autopsy rr plugin for ntuser to be more consistent