by admin-jon | Oct 10, 2012 | Blog, Collection, eDiscovery collections, Electronic Discovery Collection, ESI Collection, ESI Software, Legal Hold, Preservation, Software, Tips & Tricks
Booting an Apple Macintosh in target disk mode allows computer forensic examiners to copy relevant files from the internal drive on a Mac computer. Removing hard drives instead from a Mac computer can be time-consuming and damage the system when not performed...
by admin-jon | Oct 5, 2012 | Blog, Collection, Electronic Discovery Collection, ESI Collection, ESI Software, Legal Hold, Metadata, Preservation, Software
What is multi-threaded copying and why is it important? When a large number of computer files need to be copied from their current location to a network or external hard drive, the process could take many hours or even days. For example during a civil litigation case,...
by admin-jon | Nov 24, 2010 | Blog, Computer Investigations, Electronic Discovery, ESI Collection, Tips & Tricks
A couple weeks ago, I outlined what computer forensics and electronic discovery have in common and how they differ. I’d like to expand on this topic by identifying some common obstacles encountered when using popular computer forensic software for typical electronic...
by admin-jon | Sep 12, 2008 | Blog, Collection, Electronic Discovery, ESI Collection, Preservation
Changes are underway in how electronically stored information (ESI) is processed and reviewed. These changes are due to the huge size of repositories – hundreds of gigabytes or multiple terabyte sizes – identified for collection and processing....