A framework for identifying associations in digital evidence using metadata