Digital evidence management

1. A system comprising:

one or more processors; and

one or more non-transitory computer-readable media maintaining executable instructions, which, when executed by the one or more processors, program the one or more processors to perform operations comprising:

receiving a digital asset and first metadata that is associated with the digital asset;

determining a content category of content of the digital asset;

performing, on the digital asset, a first analysis application of a plurality of analysis applications, wherein the first analysis application is determined at least based on the determined content category of the content of the digital asset;

generating a second metadata which includes an analysis result of the first analysis application performed on the digital asset;

storing the first metadata and the second metadata in association with the digital asset;

receiving, from a client device, an indication to associate the digital asset with a case folder;

associating the digital asset and the analysis result with the case folder; and

classifying the digital asset as digital evidence based at least on receiving the indication.

2. The system as recited in claim 1 , the operations further comprising:

generating a third metadata including information about the second metadata including the analysis result; and

storing the third metadata in association with the first metadata.

3. The system as recited in claim 2 , further comprising a local metadata database and a storage system, wherein:

the first metadata and the third metadata are stored in the local metadata database; and

the digital asset and the second metadata including the analysis result are stored in the storage system over a network.

4. The system as recited in claim 1 , the operations further comprising:

determining the content category of the content of the digital asset by determining whether the digital asset includes at least one of video content, audio content, image content, or text content; and

performing the first analysis application includes performing at least one of video analysis on the video content, audio analysis on the audio content, image analysis on the image content, or text analysis on the text content.

5. The system as recited in claim 4 , further comprising at least one of:

the video analysis includes at least one of facial recognition, object recognition, license plate recognition, event detection, motion detection, or video tracking;

the audio analysis includes at least one of voice-to-text translation, sound recognition, voice pattern recognition, or recognition of key words;

the image analysis includes at least one of facial recognition, object recognition, or license plate recognition; or

the text analysis includes at least one of optical character recognition, context recognition, keyword recognition, or indexing of the recognized text.

6. The system as recited in claim 1 , the operations further comprising:

based at least on associating the digital asset and the analysis result with the case folder, changing a retention policy associated with the digital asset.

7. The system as recited in claim 6 , wherein:

prior to associating the digital asset with the case folder, the retention policy for the digital asset includes a first threshold time before the digital asset is moved to archived assets and a second threshold time before the digital asset is deleted; and

following associating the digital asset with the case folder, the retention policy for the digital asset includes a third threshold time before the digital asset is moved to archived evidence, the third threshold time being based at least on a resolution of a legal case corresponding to the case folder, and a fourth threshold time before the digital asset is deleted.

8. The system as recited in claim 1 , the operations further comprising:

receiving, from a client device, a request for the case folder; and

sending, to the client device, information related to the digital asset, the second metadata including the analysis result, and a chain of custody log including a record of one or more accesses from one or more client computers to the digital asset.

9. The system as recited in claim 1 , the operations further comprising maintaining a chain of custody log for the digital asset, the chain of custody log including:

a record of one or more accesses from one or more client computers to the digital asset;

an indication of a respective time when the one or more accesses took place; and

a respective user identifier associated with the one or more accesses.

10. The system as recited in claim 1 , the operations further comprising receiving user data as the first metadata, the user data indicating at least one of:

a start time in the content of the digital asset for performing analysis on the digital asset;

an end time in the content of the digital asset for performing analysis on the digital asset; or

at least one indicator of a type of analysis to perform on the content of the digital asset.

11. The system as recited in claim 1 , the operations further comprising:

assigning a file name to the digital asset including a first file name portion that is individually distinguishable within the system, the file name including a second file name portion corresponding to a mime type of the digital asset; and

assigning a file name to the second metadata including the analysis result including the same first file name portion, and including a second file name portion that is different from the second file name portion assigned to the digital asset.

12. A method comprising:

receiving, by one or more processors, a digital asset and first metadata that is associated with the digital asset;

determining a content category of content of the digital asset;

performing, on the digital asset, a first analysis application of a plurality of analysis applications, wherein the first analysis application is determined at least based on the determined content category of the content of the digital asset;

generating a second metadata which includes an analysis result of the first analysis application performed on the digital asset;

storing the first metadata and the second metadata in association with the digital asset and storing third metadata including information about the second metadata in association with the first metadata; and

maintaining a chain of custody log for the digital asset, the chain of custody log including:

a record of one or more accesses from one or more client computers to the digital asset;

an indication of a respective time when the one or more accesses took place; and

a respective user identifier associated with the one or more accesses.

13. The method as recited in claim 12 , further comprising:

storing the first metadata and the third metadata in a local metadata database; and

storing the digital asset and the second metadata including the analysis result in a storage system over a network.

14. One or more non-transitory computer-readable media storing instructions that, when executed by one or more processors, program the one or more processors to:

receive a digital asset and first metadata that is associated with the digital asset;

determine a first content category of content of the digital asset;

perform, on the digital asset, a first analysis application of a plurality of analysis applications, wherein the first analysis application is determined at least partially based on the determined first content category of the content of the digital asset;

generate a second metadata which includes a first analysis result of the first analysis application performed on the digital asset;

store the first metadata and the second metadata in association with the digital asset; and

maintain a chain of custody log for the digital asset, the chain of custody log including:

a record of one or more accesses from one or more client computers to the digital asset;

an indication of a respective time when the one or more accesses took place; and

a respective user identifier associated with the one or more accesses.

15. The one or more non-transitory computer-readable media as recited in claim 14 , wherein the one or more processors are further programmed to:

generate a third metadata including information about the second metadata including the first analysis result;

store the first metadata and the third metadata in a local metadata database; and

store the digital asset and the second metadata including the first analysis result in a storage system over a network.

16. The one or more non-transitory computer-readable media as recited in claim 15 , wherein the one or more processors are further programmed to:

determine a second content category of the content of the digital asset, wherein the second content category is for a category of content different from the first content category;

perform, on the digital asset, a second analysis application of the plurality of analysis applications, which is determined at least based on the determined second content category of the content of the digital asset;

generate a fourth metadata which includes a second analysis result of the second analysis application performed on the digital asset; and

store the fourth metadata including the second analysis result in the storage system in association with the digital asset.

17. The one or more non-transitory computer-readable media as recited in claim 16 , wherein the one or more processors are further programmed to:

generate a fifth metadata including information about the fourth metadata including the second analysis result; and

store the fifth metadata in the local metadata database in association with the first metadata.

18. The one or more non-transitory computer-readable media as recited in claim 14 , wherein the one or more processors are further programmed to:

receive, from a client device, an indication to associate the digital asset with a case folder;

associate the digital asset and the second metadata including the first analysis result with the case folder; and

based at least on associating the digital asset and the second metadata including the first analysis result with the case folder, changing a retention policy associated with the digital asset.

19. The one or more non-transitory computer-readable media as recited in claim 14 , wherein the one or more processors are further programmed to:

assign a file name to the digital asset including a first file name portion that is individually distinguishable from other file names of other digital assets, the file name including a second file name portion corresponding to a mime type of the digital asset; and

assign a file name to the second metadata including the first analysis result including the same first file name portion, and including a second file name portion that is different from the second file name portion assigned to the digital asset.