Chapter 1
Introducing eDiscovery
About eDiscovery
eDiscovery helps you to identify and collect relevant data in-house to address electronic discovery from beginning to end. You can run collections across the entire enterprise Network of a company. The collected evidence can then be processed, reviewed, and exported.
The reports are enhanced by the use of keyword searches and filters to gather only relevant data that pertains to a case. The resulting production set can then be exported into an AD1 format, or into a variety of load file formats such as Concordance, Summation, EDRM , Introspect, and iConect.
About the Audience for this Admin Guide
This product is intended for use in gathering and processing electronically stored evidence for criminal, civil, and internal corporate cases.
The audience for this forensic investigation software tool includes law enforcement officials as well as corporate security and
IT
professionals who need to access and evaluate the evidentiary value of files, folders, computers, and other electronic data sources. They should be well-versed in the eDiscovery process. They should also have a good understanding of Chain of Custody and the implications of running the eDiscovery process within an organization. They should also have the following competencies when using this software:
Basic knowledge of and training in forensic policies and procedures
Familiarity with the fundamentals of collecting digital evidence and ensuring the legal validity of the evidence
Understanding of forensic images and how to acquire forensically sound images
Experience with case studies and reports
| 18
What You Can Do with eDiscovery
eDiscovery addresses the entire eDiscovery model in a repeatable, defensible, and automated manner, using a single solution.
See Getting Started with Place Product Name on page 22.
What you can do with eDiscovery
Phase in the eDiscovery Model What you can do
Information Management
Thoroughly audit for and identify electronically stored information (ESI) that falls outside your records retention policies.
Flag non-compliant files and log their locations.
Preserve and Collect
Forensically collect ESI from workstations, laptops, network servers, email servers, and structured data repositories.
Collect only relevant data from shared resources or all people-created data, as you choose, using advanced searching and filtering options.
Create native PSTs and NSFs from email servers.
Perform incremental collections to only collect data that has changed from a previous collection.
Reuse previously executed collections and associate them with multiple projects.
Processing and deduplication
Process data as you collect, while maintaining complete chain of custody.
Use distributed processing that greatly reduces processing time.
Automatically identify and categorize data, including encrypted files.
Deduplicate email and documents across the case or for a specific people.
Scale processes to handle massive data sets.
Analysis and Review
Production
Use a friendly web-based interface with native file review that allows for collaborative, full review prior to creating a production set and exporting to a load file format.
Perform advanced searches with hit highlighting in files, emails, and attachments that lets you quickly find responsive evidence without having to read every single word.
Cull data by leveraging sophisticated searching and rich filtering.
View documents by families or similarity.
View email grouped by conversations.
Produce responsive-only documents and email in native format or an AD1 forensic archive, organized by people or as a single instance, with options to preserve the original folder structure.
Generate load files for export to popular third-party review tools, including
Concordance, EDRM XML, iConect, Introspect, Relativity, Ringtail (MDB), or
Summation eDII.
Produce detailed reports, such as search reports, processing exception reports, production, and exclusion reports.
Utilize rolling production support that enables batch production.
What You Can Do with eDiscovery | 19
Basic Workflow of eDiscovery
Although there is no formal order in which you collect, process, and export evidence using eDiscovery, you can use the following basic workflow as a guide.
Basic Workflow of eDiscovery
3
4
5
Step Task
1 Configure and setup eDiscovery and eDiscovery users before you begin collecting evidence.
2 Add people, Network shares, computers, and groups whose data you want to collect.
6
Create a project.
(Optional) Create a litigation hold.
Collect evidence from the people, network shares, computers, and groups that you added.
Approve, execute, and then process a collection.
7
8
Link to the tasks
See Configuring the System on page 76.
See About Data Sources on page 108.
See Creating a Project on page 244.
See Using Litigation Holds on page 462.
See Introduction to Jobs on page 381.
See Approving a Job on page 419.
See Executing a Job on page 419.
See Processing a Job on page 420.
See the Reviewer Guide.
Review data.
After you process a collection, you open the resulting case from the Project List into
Project Review. From Project Review, you filter, search, and apply labels on the processed data until you have a production set that contains only relevant files for the case. At that point, you can export the production set to a load file as described in the next step.
Export the production set to a load file.
See the Reviewer Guide.
Basic Workflow of eDiscovery | 20
About This Admin Guide
This Admin Guide explains how administrators do the following:
Configure system settings
Create and manage projects
Configure data sources
Configure and use e-discovery features
Use the Dashboard
Use platform components such as the Site Server and agents
This guide includes the following parts:
Getting Started with Place Product Name (page 22)
Administrating and Configuring (page 42)
Configuring Data Sources (page 107)
Managing Projects (page 227)
Loading Data (page 337)
Introduction to Jobs (page 381)
Using the Dashboard (page 497)
Using Lit Holds (page 461)
Configuring and Using LawDrop (page 501)
Reference (page 525)
For information about reviewing project data using Project Review, see the eDiscovery Reviewer Guide.
For information about new features, fixed issues, and known issues, see the eDiscovery Release Notes.
You can download the Reviewer Guide and Release Notes from the Help/Documentation link. See User Actions on page 34.
About This Admin Guide | 21
