Evidence management mining