Search Posts forensic evidence recovery in investigations