Which specimen type is preferred for determining recent drug use (within the past few hours) in a forensic investigation?