150 likes | 298 Views
Leveraging Exchange 2010 for ECA and eDiscovery. E.J. Bastien Litigation Business Analyst Microsoft Corporation. e Discovery Features in Microsoft Exchange 2010. Preservation Search and Data Minimization Review Export. Preservation. Litigation Hold feature
E N D
Leveraging Exchange 2010 for ECA and eDiscovery E.J. Bastien Litigation Business Analyst Microsoft Corporation
eDiscovery Features in Microsoft Exchange 2010 Preservation Search and Data Minimization Review Export
Preservation • Litigation Hold feature • Indefinite retention for all mailbox content for enabled mailboxes. • “Dumpster 2.0” backend receptacle: • Preserves versions and even intentional purges • Inaccessible to the custodian • Allows custodians to manage Exchange content without regard to legal hold obligations. • Easily configured with a single button-click from the Exchange Control Panel (online GUI).
Search and Data-Minimization • Online Exchange Control Panel (“ECP”) interface supports: • Cross mailbox search • Boolean operators • Date restrictions • Domain filtering • Search performance reports by term • Exact AND near-duplicate suppression • Option to collect or exclude items that are presently unsearchable.
Use-Case Scenario: Early Case Assessment • Quick pre-Discovery investigation • Search across multiple Exchange mailboxes, including online Exchange Archives. • Targeted search terms • Date range restriction • Domain filtering • Duplicate suppression and thread compression • Metadata log creation • Copy results to another mailbox for direct review or export to a .pst.
Review • Familiar Outlook interface via Outlook Web Access • Search results organized under a folder bearing the search’s title. • De-duplication Off: Results are organized in subfolders per mailbox searched with original folder structure intact within. • De-duplication On: Results contained in a single subfolder for simple linear review. • If Full Logging was employed, each responsive item from each mailbox searched (regardless of suppression) is listed in a metadata log including pointers to its original native folder path. • Review pane • Simple & intuitive sorting, foldering, flagging.
Export: Multiple options • ExportMailboxRequestcommandlet via Powershell • Full mailbox export to .pst • Multiple mailbox export to .pst • Date restrictions • Folder restrictions • Export to .pst via local Outlook client
ECA Process Summary • Log into ECP, create a new search and define appropriate filters: • Mailboxes to include • Search terms • Date range • Participants/Domains • Review search filter performance via Hit-By-Term report. • Copy responsive items to another mailbox. • Optional de-duplication/thread-compression. • Optional “full logging” creates a companion metadata log containing pointers to each responsive item’s native folder path. • Single-click access to receptacle mailbox via OWA to facilitate immediate review. • Reviewers can then easily flag or folder items at their discretion. For example, drag and drop items into folders called “Responsive,” “Privileged,” etc. • Content can be exported to single or multiple .psts which can be subsequently loaded into alternative data-minimization/review/ production platforms.