Tony - There is a lot to discovery, depending on whether you're just doing internal assessments or responding to a legal- or regs-driven discovery request. And of course depending on what is at stake and how much time you have to find the e-mails.
You need to think about searching online mailboxes, public folders, PSTs, backups (if you really have to) and archives (if you have them). In theory you could go as far as searching hard drives for "deleted" data, searching thumb drives and removable storage, searching mobile devices, etc. Then of course there's content inspection at the transport layer versus search of messages "at rest" ... which both have a discovery element to them. If you're providing evidence that will go to court, then there's a whole body of knowledge around evidential weight, chain of custody, etc. that you need to understand. The article Chris refers to is a start. I'll be speaking about this at tech-ed and have a whitepaper coming out soon (vendor agnostic, foreword by Paul Robichaux) ... intended to help bridge the gap between IT and legal around Exchange & e-mail from a discovery perspective. For an in-depth legal perspective see http://www.edrm.net or search for "Sedona Conference", for starters. Bottom line is doing discovery right for legal purposes can be really challenging and these days most companies are turning to 3rd party services firms specializing in the matter. Software solutions are emerging and a number of niche players have been around for a long time. PST solutions - see my article (i.e., C2C, Sherpa, etc. ... and many of the archival vendors have solutions built into their archive solutions) Specialized case management with some having discovery capabilities (coming from legal arena): Guidance Software (EnCase), Concordance, Summation, DolphinSearch, etc. Backup-software focused: Quest Recovery Manager for Exchange & Kroll Ontrack And so on ... Ping me offline if you have specific questions. David > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:bounce- > [EMAIL PROTECTED] On Behalf Of Missy Koslosky > Sent: May 5, 2006 2:26 PM > To: Exchange Discussions > Subject: RE: Discovery Software - OT > > <vendor hat> > > Quest's Recovery Manager also has discovery capabilities. > > </vendor hat> > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Chris > Scharff > Sent: Friday, May 05, 2006 11:13 AM > To: Exchange Discussions > Subject: RE: Discovery Software - OT > > David Sengupta wrote a nice article on the subject recently. It (at the > very > least) provides a valuable framework for thinking about the problem. > http://www.windowsitpro.com/articles/print.cfm?articleid=49896 > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:bounce- > > [EMAIL PROTECTED] On Behalf Of Morrison, Gordon > > Posted At: Friday, May 05, 2006 1:00 PM Posted To: swynk > > Conversation: Discovery Software - OT > > Subject: RE: Discovery Software - OT > > > > I have had the same question. Here is the list of products that offer > > some kind of discovery capability: > > > > Sherpa software > > Mimosa systems > > MDY > > C2C > > Meridio > > X1 > > > > You can search slipstick for more options. > > > > PSTs create an added level of complexity, and if you have them in your > > environment, be sure to get a good understanding of how the products > > deal with them. > > > > The other solution that seems to work if the number of systems is > small > > is Google/MSN desktop search results. It depends on how large your > > discovery needs to be. > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of > > Fyodorov, Andrey (Citco) > > Sent: Friday, May 05, 2006 11:50 AM > > To: Exchange Discussions > > Subject: RE: Discovery Software - OT > > > > Check Tumbleweed (http://www.tumbleweed.com) > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of > Tony > > Woods > > Sent: Friday, May 05, 2006 11:44 AM > > To: Exchange Discussions > > Subject: Discovery Software - OT > > > > Hi, Exchange 2003 SP2 > > > > I'm looking to find products out there for doing legal discovery of > > certain types of emails. Like ones that contain key words and such. > I'm > > hoping it can look through the database. I found Discovery Attender > > from Sherpa Software. Anyone used it? Other products? > > > > Thanks, > > Tony > > > > This message is intended only for the named recipient(s) above and may > > contain information that is privileged, confidential and/or exempt > from > > disclosure under applicable law. If you have received this message in > > error, or are not the named recipient(s), please immediately notify > the > > sender and destroy this message. > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > > To unsubscribe send a blank email to > > [EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > To unsubscribe via postal mail, please contact us at: > > Jupitermedia Corp. > > Attn: Discussion List Management > > 475 Park Avenue South > > New York, NY 10016 > > > > Please include the email address which you have been contacted with. > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > > To unsubscribe send a blank email to > > [EMAIL PROTECTED] > > Exchange List admin: [EMAIL PROTECTED] > > To unsubscribe via postal mail, please contact us at: > > Jupitermedia Corp. > > Attn: Discussion List Management > > 475 Park Avenue South > > New York, NY 10016 > > > > Please include the email address which you have been contacted with. > > > > > > _________________________________________________________________ > > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > > To unsubscribe send a blank email to [EMAIL PROTECTED] > > dl.sparklist.com > > Exchange List admin: [EMAIL PROTECTED] > > To unsubscribe via postal mail, please contact us at: > > Jupitermedia Corp. > > Attn: Discussion List Management > > 475 Park Avenue South > > New York, NY 10016 > > > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to [EMAIL PROTECTED] > dl.sparklist.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with.
smime.p7s
Description: S/MIME cryptographic signature
