Forensic analyst reviewing metadata evidence in lab