Effectively Navigating the Three Phases of Forensic Production of Data
Forensic analysis goes beyond what a document review will uncover.
July 17, 2015 at 09:00 AM
6 minute read
The original version of this story was published on Legal Tech News
In supporting litigation I am often asked to assist with a demand for inspection of an opposing party's computer systems or to defend against unfettered access to computer systems by an adversary. These cases frequently involve a purported theft or destruction of data requiring forensic analysis of the relevant systems. Forensic analysis goes beyond what a document review will uncover.
For instance, if a Microsoft Word document is central to issues in litigation, review of that document may yield relevant content and perhaps useful metadata. The Word document itself will not, however, give you any indication if it had been copied to external media, emailed outside the organization via a personal Web mail account or whether other deleted copies or fragments exist which may help paint a more detailed picture of the provenance of that all-important document. In addition, activity occurring during the timeline of editing versions of the document may provide additional relevant information not normally included in a legal review of electronic documents. System logs and system settings maintained by the operating system are additional sources of evidence not normally included in a document review.
A forensic production of data starts with the proper preservation of relevant data sources and continues with an appropriate analysis and review protocol to achieve your goals in the production or demand for data. When crafting a forensic analysis and production protocol, the forensic expert must balance two competing interests: performing a thorough, effective analysis of relevant systems and protecting the privacy of the users or owners of the systems in question.
NOT FOR REPRINT
© 2024 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.
Trending Stories
- 1The Law Firm Disrupted: For Big Law Names, Shorter is Sweeter
- 2BD Settles Thousands of Bard Hernia Mesh Lawsuits
- 3First Lawsuit Filed Alleging Contraceptive Depo-Provera Caused Brain Tumor
- 4The 'Biden Effect' on Senior Attorneys: Should I Stay or Should I Go?
- 5The Growing Tension—And Opportunity—in Big Law Nonequity Tiers
Featured Firms
Law Offices of Gary Martin Hays & Associates, P.C.
(470) 294-1674
Law Offices of Mark E. Salomone
(857) 444-6468
Smith & Hassler
(713) 739-1250