Forensic analyst reviewing encrypted hard drive evidence