Forensic analyst reviewing hard drive evidence