Educause Security Discussion mailing list archives

Re: OT: E-discovery Windows Tools


From: Chris Green <cmgreen () UAB EDU>
Date: Wed, 22 Dec 2010 12:57:12 -0600

1)      Feel free to estimate costs of collection and discuss with your counsel to get scope reduced.  I’ll assume 
you’ve already done that.

2)      http://edrm.net/resources/guides/edrm-framework-guides can help talk on this stuff.

3)      Many “professional” approaches for this basically have you grant read access to something that can index the 
network drive.  Having beat my head against network drives + windows desktop search and never quite sure what google 
desktop is trying to be at the moment, I’d probably try:

a.        http://www.copernic.com/en/products/desktop-search/corporate/index.html ;  I have no relationship to this 
software (including never installed it) and see how many PC drives + shares you can expose to a single system for 
indexing and then work to do your searches.

b.      Notebooks can be a big pain to deal with.

c.       If there’s some magic, affordable tool, I’ve yet to see it.  I’ve seen unaffordable very unmagic tools but 
address some pain points ;-)

If you have a techie doing the searches, we’ve found:

“Customer” - Search Terms -> “Techie”
“Techie” -Result List Spreadsheet -> “Customer”
If Result List is good -> Export Found Documents “Search Term Query X” folder -> “Customer”
Else: refine search terms

It also helps to talk about search terms.  People are good at thinking about these things though based on google 
expererience.  Some terms are terrible like “UAB” or Green (school color, not my name)

We used a Sharepoint  List for tracking requests and refinements and a file share to save results to.



From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Kevin 
Kelly
Sent: Wednesday, December 22, 2010 12:00 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] OT: E-discovery Windows Tools

We need a tool to search through Windows file shares and local Windows PC hard drives for E-Discovery.  It needs to 
search all the basic Office documents along with PDFs and PSTs.  We are a SMB with no budget for this tool, so we need 
something that is free or inexpensive.  Something that works with Macintosh computers would be a plus.

--
Kevin Kelly
Director, Network Technology
Whitman College

Current thread: