There is provided a method for processing electronic documents. The method includes: receiving a plurality of electronic documents stored in a file container created based on a file system; retrieving metadata from the file container, the metadata indicating forensic information about the plurality of electronic documents; applying an interactive filtering to the metadata according to user inputs; and selectively extracting one or more electronic documents from the file container according to results of the interactive filtering.