But the laptop was on but closed & asleep, how would you shut down, boot into another OS & then return it to the previous state without logs? 

 Ya fair! I was only thinking USB logs in that specific instance, not thinking through the whole scenario