1. A computer-implemented method, comprising: at a first time, identifying a first event on a computing device; in response to identifying the first event on the computing device, storing a first state of the computing device including storing a log of the first event; at a second time after the first time, identifying a second event on the computing device; determining, from the log of the first event, that the second event is similar to the first event; in response to determining that the second event is similar to the first event, providing for display on the computing device, a list of one or more operating system objects associated with the first state of the computing device; receiving a user selection of one of the one or more operating system objects associated with the first state of the computing device; and causing the one of the one or more operating system objects associated with the first state of the computing device to be instantiated on the computing device.