Forensic analyst extracting data from hard drive