Comments for D4 eDiscovery http://www.d4discovery.com eDiscovery. There is a better way. Tue, 31 Jan 2012 22:52:52 +0000 hourly 1 http://wordpress.org/?v=3.1 Comment on Top 4 from D4 – 2012 eDiscovery Predictions by Cindy Courtney http://www.d4discovery.com/2012/01/top-4-from-d4-2012-ediscovery-predictions/#comment-770 Cindy Courtney Tue, 31 Jan 2012 22:52:52 +0000 http://www.d4discovery.com/?p=4574#comment-770 I would like to see the courts really define the contours of proportionality with some solid, fact-based decisions about what does and what doesn't go to far in seeking ESI. I would like to see the courts really define the contours of proportionality with some solid, fact-based decisions about what does and what doesn’t go to far in seeking ESI.

]]> Comment on To DeNIST or Not to DeNIST, that is the question! by Peter Coons http://www.d4discovery.com/2011/11/to-denist-or-not-to-denist-that-is-the-question/#comment-435 Peter Coons Mon, 14 Nov 2011 15:20:31 +0000 http://www.d4discovery.com/?p=4126#comment-435 Craig, thanks for the response. As I mentioned in the blog post, we are definitely aware that the DENISTing process falls short. At D4 we have created dozens of custom hash sets for applications not included in the NIST list. We actually call the process "D4'ing" your data instead of denisting. Our clients have been very happy with the results and it is one of the many reasons they keep coming back. Thanks again for a link to your very informative blog. Craig, thanks for the response. As I mentioned in the blog post, we are definitely aware that the DENISTing process falls short. At D4 we have created dozens of custom hash sets for applications not included in the NIST list. We actually call the process “D4′ing” your data instead of denisting. Our clients have been very happy with the results and it is one of the many reasons they keep coming back. Thanks again for a link to your very informative blog.

]]> Comment on To DeNIST or Not to DeNIST, that is the question! by Craig Ball http://www.d4discovery.com/2011/11/to-denist-or-not-to-denist-that-is-the-question/#comment-433 Craig Ball Sun, 13 Nov 2011 18:38:03 +0000 http://www.d4discovery.com/?p=4126#comment-433 To suggest that DeNISTing won't get ridd of all the chaff is quite an understatement. The NIST list doesn't yet include most system files from either the Vista or Windows 7 operating systems, nor from the 2007 and forward releases of Microsoft Office. It's a shadow of what it could be and far from what its users think it is. Check out: http://ballinyourcourt.wordpress.com/2011/08/31/de-nisting-defective/ for more information. To suggest that DeNISTing won’t get ridd of all the chaff is quite an understatement. The NIST list doesn’t yet include most system files from either the Vista or Windows 7 operating systems, nor from the 2007 and forward releases of Microsoft Office. It’s a shadow of what it could be and far from what its users think it is.

Check out: http://ballinyourcourt.wordpress.com/2011/08/31/de-nisting-defective/ for more information.

]]> Comment on Database Discovery by Nancy Fraser http://www.d4discovery.com/2011/10/database-discovery/#comment-381 Nancy Fraser Thu, 06 Oct 2011 20:32:52 +0000 http://www.d4discovery.com/?p=3855#comment-381 Thanks Peter! As CEO of a company that analyzes medical records, we are starting to get requests from clients on how to retrieve native form medical documents ~ not such an easy task. Your blog post has provided me a simple high level explanation that I can pass along to clients. Thanks Peter! As CEO of a company that analyzes medical records, we are starting to get requests from clients on how to retrieve native form medical documents ~ not such an easy task. Your blog post has provided me a simple high level explanation that I can pass along to clients.

]]> Comment on Computer Forensics & eDiscovery for the iPad by Richard Rodney http://www.d4discovery.com/2011/02/computer-forensics-e-discovery-for-the-ipad/#comment-304 Richard Rodney Thu, 21 Jul 2011 19:19:29 +0000 http://ambeta3.info/?p=411#comment-304 this is some good stuff Pete..Thanks for sharing this is some good stuff Pete..Thanks for sharing

]]> Comment on iPhone Forensics Revisted by Det. Bob Elder - VICPD http://www.d4discovery.com/2011/05/iphone-forensic-revisted/#comment-165 Det. Bob Elder - VICPD Mon, 16 May 2011 06:38:02 +0000 http://www.d4discovery.com/?p=1858#comment-165 The screen shots you are looking at of your iPhone is a feature in the iPhone that captures the screen when you hit the home button. This feature provides forensic examiner with a mother load of evidence. I am working a case right now where I ran the same process with MPE+/FTK and it got the "Holy Grail" of deleted images; deleted thumbnails; and screen shots of the camera roll that showed about 10 of the 19 images of the offence found in the small roll on top of the Photo menu. Great stuff! The screen shots you are looking at of your iPhone is a feature in the iPhone that captures the screen when you hit the home button. This feature provides forensic examiner with a mother load of evidence. I am working a case right now where I ran the same process with MPE+/FTK and it got the “Holy Grail” of deleted images; deleted thumbnails; and screen shots of the camera roll that showed about 10 of the 19 images of the offence found in the small roll on top of the Photo menu. Great stuff!

]]>