Please enable JavaScript.

Coggle requires JavaScript to display documents.

Week 2/3 cotent - Coggle Diagram

- - - - where can digital evidence be found
    - - capturing evidence
        
        while
        
        documentation of activities at the scene
        
        powered on systems should be handled with care(volatile data)
        
        we can capture
        
        on-line data
        
        public forums
        
        private account details
        
        off-line data
        
        post
        
        before
        
        preparation for the capture
        
        ensure necessary equipment is there
        
        consider potential sources of evidence
    - - explain relevance +implications of original data rquest
      - reproducibility- a party should achieve the same result by looking at the processes
      - no action should be taken that changes data
      - person in charge is help responsible for meeting principles
    - - complexity of data requires competence to conduct the analysis
      - consider nature +purpose of examination
    - - communicate the result either verbally, via a report or witness evidence if it is required at a court.
  - - - preservation-includes steps taken to ensure that ESI is protected against inappropriate alteration or destruction
      - collection- is the process of “gathering ESI for future use in the
        e-discovery process
      - examples
        
        preserving and collecting email from live servers
    - - definition
        
        the filtering of information by document type,data type,data range,keywords, and so on.
        
        user friendly formats for use by attorneys
      - 2 main goals of of processing
        
        Data Transformation
        
        data must be transformed into a readable format
        
        Data Reduction
        
        volumes of data must be reduced through filtering
        
        Techniques
        
        keyword search
        
        indexing
        
        database
        
        Advanced Analytics
        
        De-duplication
        
        identifies if a file is a copy of a file already in the
        data set for review
        
        per custodian
        
        global
      - Processing strategies
        
        Database Focused
        
        Tool focused
        
        Hybrid
    - - identify sources of relevant/ discoverable ESI- (determine where the ESI resides)
        
        5/6 common storage locations
        
        removable media;cds,dvds,usbs,hard drives
        
        server environment
        
        personal digital assistants blackberry
        
        backup environment;archival
        
        Workstation environment; desktops, laptops
        
        data stored in 3rd party servers; google drive
      - way of identifying
        
        informational interviews
      - identify date range and format and relevance of ESI
    - - verify accuracy +completeness before production
        
        meta data
        
        image files
        
        data volume
        
        text fields/files
        
        exception files
      - end result of an investigation is provided as a converted image (TIFF, pdf)
        
        with load files
    - - getting the e-house in order to mitigate risk expenses should e-discovery become an issue
    - - data displayed for legal purposes in depositions or at trial
    - - A model that outlines the 9 stages of e-discovery and the activities related to each stage
  - - - when discoverable information is found in some sort of electronic/ digital format
    - - parties engage in discovery as part of any civil litigation
      - request+acquire non-privileged information in possession of other parties