more-arw search

Q&A Forum

Need to scan all hard drives - subpoenaed by the DOJ

A client of ours asked if we knew of any SW products that can comprehensively scan all hard drives for all employees (both in their corp offices and those the work remote) for specific documents and documents containing specific terms. They were subpoenaed by the DOJ and need to do this in a very aggressive time frame. They've already thought about google search - that won't work. They have office 365 and there are limitations with that too. Is anyone aware of such a tool or product?

Answers

Topic Expert
Wayne Spivak
Title: President & CFO
Company: SBAConsulting.com
LinkedIn Profile
(President & CFO, SBAConsulting.com) |

A Google on "Forensic hard drive scans" yielded a bunch.

This is an example:
http://www.gfi.com/blog/top-20-free-digital-forensic-investigation-tools-for-sysadmins/

Anonymous
(Manager) |
dan feely
Title: President
Company: TSI-Transforming Solutions, Inc.
LinkedIn Profile
(President, TSI-Transforming Solutions, Inc.) |

Thanks Wayne

Gary Johnson
Title: IT Audit Project Manager
Company: Colorado PERA
(IT Audit Project Manager, Colorado PERA) |

EnCase from Guidance Software has an enterprise version that can scan all hard drives on a network in a forensically sound manner, but it isn't free. Have they checked into having this done by a third party? There could be issues with chain of custody and evidence handling, since this is apparently a legal matter, and an outside party can provide a layer of protection from questions of the data integrity and completeness. Documentation of where the document was found, how it was retrieved and preserved will be important during the collection phase as well.

2455 views
Topics

Get Free Membership

By signing up, you will receive emails from Proformative regarding Proformative programs, events, community news and activity. You can withdraw your consent at any time. Contact Us.

Business Exchange

Browse the Business Exchange to find information, resources and peer reviews to help you select the right solution for your business.

Learn more

Contribute to Community

If you’re interested in learning more about contributing to your Proformative community, we have many ways for you to get involved. Please email content@proformative.com to learn more about becoming a speaker or contributing to the blogs/Q&A Forum.