Data analysis system to facilitate investigative process

A method comprising:

• causing presentation, by a first computing device, of a user interface configured to facilitate a first investigation session, the facilitating of the first investigation session including receiving user search queries and presenting search results for each received search query;
• tracking user activity that includes one or more user actions performed by a user using the first computing device during the first investigation session, the one or more user actions including a search query provided as input by the user to the first computing device during the first investigation session;
• modifying a data object, in a database, that represents an investigative issue associated with the first investigation session to include a reference to the one or more user actions;
• and
• transmitting, over a network, a set of machine-readable instructions to the first computing device or a second computing device that cause the first computing device or the second computing device, to present, during a second investigation session, a graphical representation of the user activity performed during the first investigation session based on the data object, the graphical representation of the user activity comprising a textual list of the one or more user actions, the textual list including a navigation link that, when selected, causes presentation of a set of search results corresponding to the search query input by the user during the first investigation session;
• receiving a user selection of text included in a search result in the set of search results;
• generating a token that includes the text;
• identifying one or more additional instances of the token in a remainder of the set of search results;
• and
• upon receiving a request to present one of the remainder of the set of search results, visually distinguishing the one or more additional instances of the token in the one of the remainder of the set of search results.

A machine-readable storage device embodying instructions that, when executed by at least one processor of a machine, cause the machine to perform operations comprising:

• causing presentation, a first computing device, of a user interface configured to facilitate a first investigation session, the facilitating of the first investigation session including receiving user search queries and presenting search results for each received search query;
• tracking user activity that includes one or more user actions performed by a user using the first computing device during the first investigation session, the one or more user actions including a search query provided as input by the user to the first computing device during the first investigation session;
• modifying a data object, in a database, that represents an investigative issue associated with the first investigation session to include a reference to the one or more user actions;
• and
• transmitting, over a network, a set of machine-readable instructions to the first computing device or a second computing device that cause the first computing device or the second computing device, to present, during a second investigation session, a graphical representation of the user activity performed during the first investigation session based on the data object, the graphical representation of the user activity comprising a textual list of the one or more user actions, the textual list including a navigation link that, when selected, causes presentation of a set of search results corresponding to the search query input by the user during the first investigation session;
• receiving a user selection of text included in a search result in the set of search results;
• generating a token that includes the text;
• identifying one or more additional instances of the token in a remainder of the set of search results;
• and
• upon receiving a request to present one of the remainder of the set of search results, visually distinguishing the one or more additional instances of the token in the one of the remainder of the set of search results.