1. A system comprising: one or more processors of a machine; and a memory storing instructions that, when executed by the one or more processors, cause the one or more processors to perform operations comprising: accessing, from a machine-readable storage device, a data object representing an investigative issue; causing presentation, on a display of a device, of a user interface configured to receive user search queries and to present search results for each received search query; causing presentation of a set of search results within the user interface in response to receiving a search query; receiving a user selection of one or more filters; filtering the search results in accordance with the one or more filters; receiving a user selection of text included in a particular search result of the set of search results; generating a token that includes the text; identifying additional instances of the token in a remainder of the set of search results; upon receiving a request to present one of the remainder of the set of search results, visually distinguishing the additional instances of the token in the one of the remainder of the set of search results; tracking user activity that includes one or more user actions performed as part of an investigation of the investigatory issue, the one or more user actions including user interactions with the user interface; creating a record of the user activity involving the investigatory issue, the record including the one or more user actions; and linking the record of the user activity with the data object representing the investigative issue, the linking of the record of user activity with the data object including modifying the data object to include a reference to the record of user activity.
7. The system of claim 1 , wherein the operations further comprise: receiving user input signaling a linkage between two or more data objects; and linking the two or more data objects in response to receiving the user input.