Forensics analyst examining evidence files in office