Resilience of forensic evidence acquisition under database schema drift