A Forensics Activity Logger to Extract User Activity from Mobile Devices