The Truth Will Set You Free: Leveraging Forensic Technology to Achieve Intelligent Search
When you combine large-scale data auditing functionality with the depth and breadth of analysis that comes with a battle-tested forensic technology, you not only get a search solution, but you get an "enterprise investigations" solution that can benefit a variety of departments, all of which require some form of enterprise search to meet their obligations. Investment in an electronic discovery product with forensic analysis capabilities can be leveraged to address data leakage, early (litigation) case assessment, FOIA requests and internal investigations addressing issues, such as intellectual property theft, harassment and fraud.
In addition to breadth and depth of analysis, forensic-level search and collection solutions offer broader reach without requiring expensive infrastructure enhancements. Organizations are able to perform large-scale audits or forensic collection on hundreds, even thousands, of assets to include workstations, laptops (on or off the corporate network), network shares, structured data repositories and email servers. The enhanced reach an organization gains with such a solution is one of several unique benefits stemming from the investigative nature of the underlying technology.
Many will find that an electronic discovery solution with forensic capabilities is actually the same cost, frequently less, than non-forensic solutions. Therefore, why would an organization want to invest the same or more money in a solution that does not provide this additional accuracy and visibility?
Specialized Training is Not a Prerequisite
The need for forensics vendors to effectively address enterprise-class search has been clearly established. Investigations conducted in the complex realities of a 21st century computing environment (SAN storage, mobile phones, removable media, etc.) can require expertise from multiple parties. And because these solutions are used by a variety of people with varying levels of proficiency, the design of these solutions is intended to allow non-technical parties to be able to use them as easily as a 12-year computer investigations veteran.
Some electronic discovery solutions based on forensic technology have simplified Web interfaces, and even a built-in wizard and pop-up help bubbles to guide users through creating a search. Within that Web interface, the user can view the data in a way that he or she can easily understand. In effect, solutions like this provide customized "windows into the data" geared toward the different types of users. For example, IT personnel can use the forensic interface to perform deeper analysis. However, a paralegal or records retention manager can view the data within the Web interface and navigate through the search results, just as they would using Windows Explorer.
Intelligent Search and Forensic Technology
To quote the co-chair of the e-discovery committee at a top-five communications company, "There was no way to tell legal counsel how many hits a search term had within the universe of documents, unless the search term was very simple. The problem is search terms are never simple." This was in reference to an attempt to identify relevant documents and emails using a non-forensic search and collection technology. Clearly, the goal associated with "intelligent search" is to locate all relevant files wherever they may live. Given the exponential growth of electronically stored information, as well as the increasing complexity of IT infrastructures, it is imperative that an enterprise search solution provide advanced and targeted search and collection, as well as comprehensive reporting.
Using forensic-level search and collection gives an organization the ability to use complex search terms and generate comprehensive search reports, as well as the ability to overcome the obstacles presented by complex, encrypted and deleted files, structured data repositories and traveling custodians. Leveraging an enterprise search platform built on forensic technology, an organization is able to access its entire corpus of data and gain greater control over its information assets. Furthermore, this technology can be used to address a wide range of obligations spanning multiple departments.
Given the enhanced precision of forensic-level search and the value such a solution presents beyond typical discovery or investigative operations, it makes financial and operational sense to employ a forensic-level solution. It is clearly the intelligent approach to enterprise search.
AccessData Group has pioneered digital investigations and litigation support for 20+ years. The company's AD eDiscovery product addresses the e-discovery lifecycle from litigation hold to the generation of load files for common third-party review tools. Clients also leverage its large-scale data auditing and forensic analysis capabilities to address a variety of enterprise search and investigative needs. 100,000+ users in corporations, government agencies, law firms and law enforcement worldwide rely on AccessData's software solutions. In the 2010 e-Discovery and e-Disclosure report conducted by The 451 Group, AccessData was cited more than any other e-discovery vendor by respondents planning to purchase e-discovery software in the next 12 months. For more information, visit www.eDiscoveryWithAccessData.com
1. Kirschenbaum G., Matthew, Ovenden, Richard and Redwine, Gabriela. 2010. Digital Forensics and Born-Digital Content in Cultural Heritage Collections. Council on Library and Information Resources. Washington DC.
2. E-Discovery: Mitigation Risk through Better Communication, Deloitte Forensic Center, 2010