Automated plist parser for Windows for mounted forensics images