Corporations allocate significant time and money for protecting their digital intellectual property. 7 Tips for better Law Firm Security
Knowledge Center
Industry Insights
View More Industry Insights
Technology-Assisted Review: Use It or Lose It?
The primary benefit of TAR is to prioritize documents within a corpus by likelihood of relevance as early as possible in the eDiscovery lifecycle.
LIVE from LegalTech NY 2013
LIVE from LegalTech NY 2013 is a compilation of blogs and insights from D4′s Engineers that attended the conference. They recapped the sessions that they thought were outstanding or just plain interesting and put them all in one place for you to enjoy.
Predictive Coding/Technology Assisted Review FAQ
Is there a difference between “Predictive Coding” and “Technology Assisted Review”?
When does it make sense to use PC/TAR?
What are the risks in using PC/TAR?
Is it defensible?
Read the answers to these and over 10 more Frequently Asked Questions here.
How To Conduct an Efficient eDiscovery Interview
As a service provider we perform a lot of intake on new electronic discovery projects. We see the difference between legal teams who have thoroughly interviewed custodians and IT staff, and those who either have not, or if they have, they didn’t ask many questions about ESI in any quantified or documented way.
In this whitepaper you will learn 6 expert tips to remember for your next eDiscovery client interview.
Three Methods for eDiscovery Document Prioritization
By Tom Groom, Vice President, Discovery Engineering, D4
Keyword Search, Concept Based Search and Support Vector Machines are all three valid approaches for document classification but there are key differences that should be considered before deciding which and—perhaps more importantly, when—to employ these approaches in the eDiscovery workflow. The intent of this white paper is to highlight the differences in the features, functions and benefits of these three approaches and identify potential application areas where they best work in the eDiscovery lifecycle
Applying Predictive Coding to Reduce Costs and Increase Quality in Document Review
By Tom Groom, Vice President Discovery Engineering, D4
The application of Predictive Coding can significantly reduce costs, dramatically reduce review time and increase quality for document review. Yes—cheaper, faster and better, all three. Computerized technology has greatly impacted the efficiencies of document review over the years.
Top 4 from D4 – 2012 eDiscovery Predictions
Will the New Rules ever feel like old news? Will predictive coding face legal or scientific challenge? Will social media become just another source of ESI? Will we ever find the holy grail of litigation support? Check out the D4 Brain Trust Predictions for 2012. Take a look, mix it up, leave a comment, a kudo, or a prediction of your own.
10 Critical Things to Consider Before You Bring eDiscovery In-House
By Peter Coons, Senior Vice President, Computer Forensics and Collections, D4
There can be a number of unforeseen and unexpected costs and hassles associated with bringing eDiscovery in-house that can quickly mitigate the savings and streamlining you hoped to achieve.
eDiscovery & Metadata: What’s In a Date?
What am I talking about? Metadata. Specifically file dates and times. Is metadata important in discovery? Does it actually tell us anything about the file or document? I will let you be the judge and jury.
But first, what is metadata?
Case Studies
Litigation Support Case Study
On a recent Saturday, D4 undertook the feat to prove that the client owned certain knowledge and features of the design and engineering of a particular product. Outside counsel contacted D4 to determine whether forensic expertise was available to establish the creation dates and last saved dates of some of the client’s earliest electronic files that were critical to establishing its patent claim.
A Large European Corporation
A large European corporation was involved in patent litigation. Hundreds of custodians needed to be interviewed and electronic data had to be collected pursuant to a discovery request. The custodians were located throughout the United States and Europe.
An International Corporation
An international corporation was accused of unfair employment practices. The suit claimed that the corporation had been engaging in these activities for years. The corporation was asked to produce relevant data regarding their hiring and promotion practices over a period of 20 years. Potentially relevant data was not only stored in e-mail systems and file servers but in outdated legacy databases as well.
A Small Technology Company
A small technology company accused the defendant of not paying invoices that had been submitted over a 12 month period. The defendant claimed that they never received any invoices until the suit was filed. The defendant also claimed that due to the invoices being submitted years after the work had been completed there was no way to verify the work that had been done or match that work to the invoices.
An Individual
An individual was accused by his former employer of possessing and using customer lists and other proprietary and confidential information to steal business shortly after being hired by a competing organization. The defendant did return some data but it was after he had been employed at the new company for over a month. It also believed that the defendant still maintained some confidential and proprietary information.
A Man Attempting to Download Movies
A man attempting to download movies, using a popular file sharing program, was sued by a major movie studio for illegally possessing over 5 feature length films. The defendant claimed that he did attempt to download one movie but it never completed and crashed his hard drive, rendering his computer inoperable. To recover from the crash the defendant reformatted his hard drive.
Tips & Tricks
Uncovering ESI (Electronically Stored Information) – 20 Search Term Tips & Tricks
Any term less than four (4) characters may result in a lot of false positives…Be aware of “noise word” lists…Be aware that searching numbers can sometimes return unwanted results…
A Plan for eDiscovery Sanity After McDermott and Duke
A sane approach is that if you have a good program, stick to it. It will save money and help get your job done better and faster. Think carefully not just about the technology, but about the workflow, supervision, quality control, training and documentation. Don’t pander to the fear. Here are some reminders:
7 Scenarios When Experts Recommend Companies “secure the data”
These days you cannot be too careful in protecting company ESI. Take precaution! Here are some best practices in securing the evidence that you can take prior to any litigation or direction from the court.
Rehashing: Using Hash Tables to Remove or Flag ESI in eDiscovery
So what’s a hash table? A hash is a calculated value of a defined set of data, such as a file or a string of text. A hash table is a collection of two or more hashes. You may be familiar with the term MD5 hash. This is an example of an MD5 hash value:
“f916b15e3982505acedb795af150c353”
It’s akin to a digital fingerprint and it’s basically meaningless.
Smartphones-The Forgotten Source of Evidence
Like it or not, the cell phone and Smartphone have become standard fare for personal use as well as issued in almost all employment arenas. In the corporate environment they’ve become a necessity just like the company-issued laptop.
Whitepapers
How To Conduct an Efficient eDiscovery Interview
As a service provider we perform a lot of intake on new electronic discovery projects. We see the difference between legal teams who have thoroughly interviewed custodians and IT staff, and those who either have not, or if they have, they didn’t ask many questions about ESI in any quantified or documented way.
In this whitepaper you will learn 6 expert tips to remember for your next eDiscovery client interview.
Three Methods for eDiscovery Document Prioritization
By Tom Groom, Vice President, Discovery Engineering, D4
Keyword Search, Concept Based Search and Support Vector Machines are all three valid approaches for document classification but there are key differences that should be considered before deciding which and—perhaps more importantly, when—to employ these approaches in the eDiscovery workflow. The intent of this white paper is to highlight the differences in the features, functions and benefits of these three approaches and identify potential application areas where they best work in the eDiscovery lifecycle
Applying Predictive Coding to Reduce Costs and Increase Quality in Document Review
By Tom Groom, Vice President Discovery Engineering, D4
The application of Predictive Coding can significantly reduce costs, dramatically reduce review time and increase quality for document review. Yes—cheaper, faster and better, all three. Computerized technology has greatly impacted the efficiencies of document review over the years.
10 Critical Things to Consider Before You Bring eDiscovery In-House
By Peter Coons, Senior Vice President, Computer Forensics and Collections, D4
There can be a number of unforeseen and unexpected costs and hassles associated with bringing eDiscovery in-house that can quickly mitigate the savings and streamlining you hoped to achieve.
Metadata, Metadata, it’s Everywhere!
By Peter Coons, Senior Vice President, Computer Forensics and Collections, D4
Metadata! That term is used a lot in the eDiscovery world and many people use it but are unsure of its meaning. So what is metadata? Let’s look to a reliable eDiscovery resource for an answer.
Webcasts
Social Media eDiscovery Case Study from the Field
Evidence from Facebook, Twitter, LinkedIn and other social networking sites is now commonplace in litigation. However, despite extensive discussion on this topic, little direction has been given on how to actually collect, process and review social media evidence in a routine and scalable fashion, consistent with best practices– until now.
New Podcast-Cloud Computing Forensics
AccessData Users Conference 2011
The Sedona Conference® Glossary, 3rd Edition, Copyright © 2010, Reprinted with permission.
30(b)(6): Under Federal Rule of Civil Procedure 30(b)(6), a corporation, partnership, association, or governmental agency is subject to the deposition process, and required to provide one or more witnesses to "testify as to matters known or reasonably available to the organization" on the topics requested by the notice. Sometimes the 30(b)(6) topics concern the discovery process itself, including procedures for preservation, collection, chain of custody, processing, review, and production. Early in the litigation, when developing a discovery plan, particularly with regard to electronic discovery, a party should be mindful of the obligation to provide one or more 30(b)(6) witnesses should the request be made by another party to the litigation, and include this contingency in the discovery plan.
Ablate: Describes the process by which laser-readable "pits" are burned into the recorded layer of optical disks, DVD-ROMs, and CD-ROMs.
Ablative: Unalterable data. See Ablate.
Acetate-base film: A safety film (ANSI Standard) substrate used to produce microfilm.
ACL (Access Control List): A security method used by Lotus Notes developers to grant varying levels of access and user privileges within Lotus Notes databases.
ACM (Association for Computing Machinery): Professional association for computer professionals with a number of resources, including a special interest group on search and retrieval. See www.acm.org.
Active Data: Information residing on the direct access storage media (disk drives or servers) that is readily visible to the operating system and/or application software with which it was created. It is immediately accessible to users without restoration or reconstruction.
Active Records: Records related to current, ongoing, or in-process activities referred to on a regular basis to respond to day-to-day operational requirements. See Inactive Records.
ADC: Analog to Digital Converter. Converts analog data to a digital format.
Address: Addresses using a number of different protocols are commonly used on the Internet. These addresses include email addresses (Simple Mail Transfer Protocol or SMTP), IP (Internet Protocol) addresses and URLs (Uniform Resource Locators), commonly known as Web addresses.
ADF: Automatic Document Feeder. This is the means by which a scanner feeds a paper document.
Adware: See Spyware.
Agent: A program running on a computer that performs as instructed by a central control point to track file and operating system events and takes directed actions, such as transferring a file or deleting a local copy of a file, in response to such events.
AIIM: The Association for Information and Image Management, www.aiim.org. It focuses on ECM (enterprise content management).
Algorithm: A detailed formula or set of rules for solving a particular problem. To be an algorithm, a set of rules must be unambiguous and have a clear stopping point.
Aliasing: When computer graphics output has jagged edges or a stair-stepped, rather than a smooth, appearance when magnified. The graphics output can be smoothed using anti-aliasing algorithms.
Alphanumeric: Characters composed of letters, numbers (and sometimes non-control characters, such as @, #,
$). Excludes control characters.Ambient Data: See Latent Data and Residual Data.
Analog: Data in an analog format is represented by continuously variable, measurable, physical quantities such as voltage, amplitude, or frequency. Analog is the opposite of digital.
Annotation: The changes, additions, or editorial comments made or applicable to a document - usually an electronic image file - using electronic sticky notes, highlighter, or other electronic tools. Annotations should be overlaid and not change the original document.
ANSI: American National Standards Institute, www.ansi.org - a private, non-profit organization that administers and coordinates the U.S. voluntary standardization and conformity assessment system.
Aperture Card: An IBM punch card with a window that holds a 35mm frame of microfilm. Indexing information is punched in the card.
API (Application Programming Interface): Interface implemented by an application to enable interaction with another application. See MAPI.
Applet: a small program typically designed as an add-on to another program, allowing greater functionality for a specific purpose other than what the original program intended, e.g., a game applet for a Web browser.
Appliance: A prepackaged piece of hardware and software designed to perform a specific function on a computer network, for example, a firewall.
Application: A collection of one or more related software programs that enable an end-user to enter, store, view, modify, or extract information from files or databases. The term is commonly used in place of "program" or "software." Applications may include word processors, Internet browsing tools, spreadsheets, email clients, personal information managers (contact information and calendars), and other databases.
Application Metadata: Data created by the application specific to the ESI being addressed, embedded in the file and moved with the file when copied; copying may alter application metadata. See also Metadata.
Application Service Provider (ASP): An Internet-based organization hosting software applications on its own servers within its own facilities. Customers license the application and access it over the Internet or via a private line connection. See SaaS.
Architecture: Refers to the hardware, software or combination of hardware and software comprising a computer system or network. "Open architecture" describes computer and network components that are more readily interconnected and interoperable. "Closed architecture" describes components that are less readily interconnected and interoperable.
Archival Data: Information an organization maintains for long-term storage and record keeping purposes, but which is not immediately accessible to the user of a computer system. Archival data may be written to removable media such as a CD, magneto-optical media, tape, or other electronic storage device, or may be maintained on system hard drives. Some systems allow users to retrieve archival data directly while other systems require the intervention of an IT professional.
Archive, Electronic: Long-term repositories for the storage of records. Electronic archives preserve the content, prevent or track alterations, and control access to electronic records.
ARMA International: A not-for-profit association and recognized authority on managing records and information, both paper and electronic, www.arma.org.
Artificial Intelligence (AI): The subfield of computer science concerned with the concepts and methods of symbolic inference by computer and symbolic knowledge representation for use in making inferences - an attempt to model aspects of human thought process with computers. It is also sometimes defined as solving by computer any problem once believed to be solvable only by humans. AI is the capability of a device to perform functions that are normally associated with human intelligence, such as reasoning and optimization through experience. It attempts to approximate the results of human reasoning by organizing and manipulating factual and heuristic knowledge. Areas of AI activity include expert systems, natural language understanding, speech recognition, vision, and robotics.
ASCII (American Standard Code for Information Interchange): Pronounced "ask-ee," a non-proprietary text format built on a set of 128 (or 255 for extended ASCII) alphanumeric and control characters. Documents in ASCII format consist of only text with no formatting and can be read by most computer systems.
Aspect Ratio: The relationship of the height to the width of any image. The aspect ratio of an image must be maintained to prevent distortion.
Attachment: A record or file associated with another record for the purpose of retention, transfer, processing, review, production, and routine records management. There may be multiple attachments associated with a single "parent" or "master" record. In many records and information management programs, or in a litigation context, the attachments and associated record(s) may be managed and processed as a single unit. In common use, this term often refers to a file (or files) associated with an email for retention and storage as a single Message Unit. See Document Family, Message Unit, and Unitization.
Attribute: A characteristic of data that sets it apart from other data, or property of a file aspect such as location, size, or type. The term attribute is sometimes used synonymously with "data element" or "property."
Audit Log or Audit Trail: An automated or manual set of chronological records of system activities that may enable the reconstruction and examination of a sequence of events and/or changes in an event.
Author or Originator: The person, office, or designated position responsible for an item's creation or issuance. In the case of a document in the form of a letter, the author or originator is usually indicated on the letterhead or by signature. In some cases, a software application producing a document may capture the author's identity and associate it with the document. For records management purposes, the author or originator may be designated as a person, official title, office symbol, or code.
Avatar: A graphical representation of a user in a shared virtual reality, such as Web forums or chat rooms.
AVI (Audio-Video Interleave): A Microsoft® standard for Windows animation files that interleaves audio and video to provide medium quality multimedia.
