The World Leader in ediscovery & Digital Investigations. EnCase ediscovery

Transcription

1 The World Leader in ediscovery & Digital Investigations EnCase ediscovery Enforce legal holds and automatically search, identify, collect, preserve and process electronically stored information across the network David Petty, VP Guidance Software, ENFSC,

2 Agenda P A G E 1 Guidance Software Overview Today s ediscovery Challenges The EnCase ediscovery Solution Demonstration Summary & Next Steps

3 Guidance Software The Recognized Leader in Digital Investigations P A G E 2 Large, Global Customer Base Over 27,000 users of EnCase Forensic Worldwide Over 500 customers of EnCase Enterprise including: More than 100 of the Fortune 500 and over half of the Fortune 50 Deployed on over 10 million desktops, laptops and servers The Leading Court-Validated Technology Used in over a million cases worldwide Authenticated in over 50 published court cases and validated under Daubert/Frye Courts have taken judicial notice of the validity of EnCase software Top-ranked Software by Industry Analysts Received Gartner s highest rating for ediscovery Software Forrester calls it The de-facto industry standard for remote desktop collection World-Class Training Program Over 4,500 corporate, law enforcement & govt professionals trained annually Top-Ranked Professional Services Organization Top 5 ediscovery Software & Services Provider in Socha-Gelbmann survey

4 Global Training Facilities P A G E 3

5 Enterprise The EnCase The Industry Industry Standard Standard Platform Platform for for Conducting Conducting Network Network Investigations Investigations P A G E 4 We originally thought of EnCase Enterprise as an e-forensic tool only. However, Guidance Software s solution addresses virtually every aspect of information security and ediscovery. Litigation Counsel, Dell

6 Today s ediscovery Challenges Companies face skyrocketing ediscovery costs, growing legal risk, and FRCP compliance requirements P A G E 5 Companies are asking; How do we. Enforce legal holds search and collect relevant ESI across the network without disruption preserve ESI and prevent spoliation avoid over-collection and the associated costs reduce or eliminate high outsourced processing fees quickly determine if we have a case comply with the Federal Rules The challenge that many organizations have today is meeting the increasing number of legal discovery requests. The average cost of a single case can easily exceed $1.75 million. Source: Gartner Inc., Nov 2007

7 EnCase ediscovery The recognized leader for the search, identification, collection, preservation and processing of ESI P A G E 6 A highly scalable ediscovery solution Operates from a central location, with no disruption to end-users Highly flexible, automated search & collection based on: File type (e.g.,.doc,.xls,.ppt) Key words (target specific content) Metadata (created, last-written/last-accessed times, etc.) Patterns (e.g., social security or credit card numbers) Hash values (i.e., digital fingerprints ) Custodians (by user name or SID) Foreign Language Support (Unicode & code pages) Court-validated preservation & prevents spoliation Fully Integrated post-collection processing Push-button load-file export into review platforms for attorney review & production EnCase ediscovery is the only product I m aware of that offers the capability to conduct detailed searches across an entire organization s IT system and to return individual user files that respond to the search criteria...the cost savings on just one piece of litigation can be significant. Scott Carlson Esq, Seyfarth Shaw New Jersey Law Journal

8 EnCase ediscovery The The In-House In-House ediscovery ediscovery Solution Solution P A G E 7 The collection tool of choice among many of the other e-discovery vendors in addition to enterprises. For many organizations this is as good as it gets. Source: ediscovery MarketScope Note, Jan 08

9 EnCase ediscovery Simplifies and streamlines the ediscovery process ediscovery with EnCase ediscovery P A G E 8 Guidance Software is the de-facto standard for remote desktop collection software. The ediscovery Vendor Landscape, July 2007 Forrester Research, Inc.

10 EnCase ediscovery Key Benefits P A G E 9 Order of magnitude cost savings Enables an in-house process that is highly efficient due to its scalability, ability to cull at the point of collection, and integrated processing capabilities Highly defensible Enables the implementation of defensible & repeatable ediscovery process, which facilitates compliance with the new Federal Rules and leverages widespread judicial acceptance of EnCase No business disruption Operates over-the-network from a central location to search, collect, and process ESI without disrupting employees TIME & MONEY Traditional ediscovery Case Study Up to $1,200 per GB for processing 5 weekends to collect & preserve 7 weeks for data identification 5 days total! Search, Identify, Collect/preserve and Process EnCase ediscovery Savings of up to 90%

11 Case Study Fortune 100 Oilfield Services Company EnCase ediscovery P A G E 10 Situation Subject to a myriad of litigation and government oversight around the world Numerous small to midsize lawsuits cost $200,000 to $1 million each in vendor fees, with aggregate costs in the tens of millions annually Solution Bring ediscovery in-house with EnCase ediscovery Eliminate unnecessary imaging and over-collection with targeted searches Highly flexible search and the ability to cull at the point of collection reduces amount of data collected Integrated processing eliminated the need to outsource processing Results ediscovery matters from small to large are now handled in-house In one small case, the amount of data collected was reduced by an order of magnitude, with savings of about $250,000 from the projected total case cost of $300,000 Aggregate cost savings for small to midsize lawsuits are in the millions of dollars annually In one large case we were able to cull 9.2 million documents to 600,000. On that case, using EnCase ediscovery, we were able to save $3 million in processing and attorney review costs Senior Counsel Fortune 100 Oilfield & Technology Services Company

12 Case Study Fortune 100 Insurance Company EnCase ediscovery P A G E 11 Situation Large US corporation with class action lawsuit custodians across 120 locations Needed to search all custodians, with 30 keywords plus Exchange mailboxes and file shares Post collection culling & processing required Solution EnCase ediscovery and GSI s Professional Services Division (PSD) Inclusive keyword search, with collection all relevant information. Collection and secondary culling from a central location 24TB collected in first 2 weeks with collection time/costs reduced over 85% Results Over US$2 million in savings for collection & processing Saved $400k/mth on hosting fees Established a repeatable, defensible process for future litigation. ROI in first case Using EnCase ediscovery for other litigation and HR, Fraud, and internal threat investigations The software paid for itself in the first use, saving us more than 85%, created instant ROI, and helped us establish an internal, repeatable, systemized, and defensible process in compliance with the Federal Rules of Civil Procedure Senior Litigation Counsel, Fortune 100 company

13 The World Leader in ediscovery & Digital Investigations EnCase ediscovery v3.1 Enforce legal holds and automatically search, identify, collect, preserve and process electronically stored information across the network

14 EnCase ediscovery v3.1 EnCase Command Center P A G E 13 Ease of Use Enhancements - New User Interface - EnCase Command Center - More intuitive flow - Configure tasks/jobs - Track status - Distributed processing - Launch directly to ECC -- EnCase Command Center can be launched directly from its desktop icon, and it will run EnCase minimized; or it can be launched from within EnCase, no need to launch EE first and then click on EnScripts

15 EnCase ediscovery v3.1 Highlights P A G E 14 Framework s s Architecture (see next slide) will consist of a: - Centralized database that communicates with all the other components in the framework - Command Center, where the user sets up jobs/tasks through a user interface which interacts with the DB - Examiner Service, which communicates with the DB to process jobs executed by the Command Center. All Stores & Outputs Unified Output Formats: Logical Evidence File (LEF), Load File Concordance, Load File Summation, Load File EDRM XML PST archive (output to 2003/2007 compatible PSTs), NSF archive (only for Domino/NSF input),

16 Improved Workflow EnCase Command Center P A G E 15

17 EnCase ediscovery v3.1 Compatibility and Supported Versions P A G E 16 Compatibility & Supported Versions EE Command Center shall be compatible with EnCase version Databases: MS SQL, MySQL, SQL Express Stores: Domino/Lotus/NSF Versions 6.0.3, 6.5.4, 7 (Domino version 8 will be supported in an upcoming release) Exchange/PST 2003, 2007 Document Stores: Documentum v5.3 (OpenText LiveLink v will be supported in an upcoming release) EECC Examiner: previous supported platforms, 32-bit, 64-Bit (not supported for all Connectors except Documentum), and Vista (x32 and x64) SAFE: 32 bit only (but supported in 32 bit mode on 64 bit systems too) XP and Vista

18 EnCase ediscovery v3.1 Enhanced Processing P A G E 17 Enhanced Processing - EDRM XML Load File Support Summary: Create output to an EDRM XML load file that can be validated with an EDRM tool to comply with industry standard format (In addition to our support of Concordance and Summation). - Global Deduplication Summary: Global Deduplication When collecting documents for a case, this feature allows users to collect and produce (ex. LEF #1), and then perform additional collections (LEF #2)while deduplicating across the entire data set (ex. Deduplicates LEF #2 against LEF #1). - Proximity Searching Summary: Proximity Searching allow users to search for keywords or terms in proximity to another keyword or term. Enhanced Search features During Processing - Collection Index Summary: The Collection Index would use the Index capabilities of EnCase Enterprise to index the collected files in the LEF and run searches using the index. - Bit 9 Integration with Conditions Summary: The new architecture of conditions will allow a staged approach to running conditions, with the first pass being a comparison with the Bit9 Database (so a user could exclude any files that match good files/hashes in the Bit9 DB before running subsequent conditions).

19 EnCase ediscovery v3.1 Enhanced Search and Collection P A G E 18 Enhanced Search and Collection Capabilities - ECM Connector - connector to Documentum v5.3 Integration Summary: Documentum is a document repository. Connectors provide a standardized EnScript interface to connect to various file and repository systems to extract documents, s and related information. The Command Center will leverage this functionality to collect, search, and further cull documents found in these repositories for specific users. - Searching of Encrypted Data Summary: Decrypt and search EFS and S/MIME encrypted files on remote custodians. Ability to search encrypted documents and s, which can be decrypted on the fly, permitting a search of the contents as if the files and s were not encrypted. Enhanced Search Features During Collection - Auto Collect (Force Collect) Protected/Encrypted Files Summary: Allow user to force collection of password protected and encrypted files by checking a box in the interface. This would be useful for both s and files within a network environment. - Search both binary and extracted view search simultaneously

20 EnCase ediscovery v3.1 Enhanced Support P A G E 19 Enhanced Support - New Servers supported - Exchange 2007, Lotus/Domino 7 Summary: Utilizing the new EnCase Connectors, Lotus / Domino version 7 will now be supported (and Lotus/Domino and will continue to be supported, but now leveraging the Connector). A Scan NSF tool will be incorporated that repairs corrupted NSF files so that they can be processed successfully. - Enhanced Searching of Exchange (Calendar, etc) & Lotus Notes (Document library, calendar, etc) Summary: Users will now be able to search non-mail items in Exchange and Notes, like calendar, contacts, tasks. - Lotus Notes Recursive Message Processing Summary: This feature would allow the Processor to search recursive messages in Lotus Notes, on both Domino Servers and from static NSF files. - Can Output to PSTs -- we have the ability to create PSTs as output of Exchange search

21 EnCase ediscovery v3.1 P A G E 20 EnCase Command Center v3.1 Screen Shots

22 EnCase ediscovery v3.1 Screenshot Cases P A G E 21

23 EnCase ediscovery v3.1 Screenshot Sources P A G E 22

24 EnCase ediscovery v3.1 Screenshot Targets P A G E 23

25 EnCase ediscovery v3.1 Screenshot Criteria P A G E 24

26 EnCase ediscovery v3.1 Screenshot Systems P A G E 25

27 EnCase ediscovery v3.1 Screenshot Case Screening Report P A G E 26

28 EnCase ediscovery v3.1 Screenshot Excluded/Included Chart P A G E 27

29 EnCase ediscovery v3.1 Screenshot Executive Summary P A G E 28

30 EnCase ediscovery v3.1 Screenshot File Log P A G E 29

31 EnCase ediscovery v3.1 Screenshot Case Overview Report P A G E 30

32 EnCase ediscovery v3.1 Screenshot Case Detail P A G E 31

33 Why Guidance Software? The Trusted Solution of Global Market Leaders P A G E 32

34 What Our Customers are Saying P A G E 33 In one large case we were able to cull 9.2 million documents to 600,000 for collection. On that case, using the ediscovery Suite, we were able to save $3 million in processing and attorney review costs Senior Counsel Halliburton, Inc. Guidance Software s solution addresses virtually every aspect of information security and ediscovery. It saves money, saves time, and produces better results whether the task is internal investigation or ediscovery. Litigation Counsel Dell, Inc. EnCase Enterprise saved us more than $1mm in the first 6 months of use. It also allowed us to complete a critical M&A discovery issue that would have been impossible with any other options in the market today CSO & VP, Risk Management McAfee, Inc.

35 What the Analysts are Saying P A G E 34 Guidance Software is the de-facto industry standard for remote desktop collection software. The ediscovery Vendor Landscape, July 2007 Forrester Research, Inc. The collection tool of choice among many of the other ediscovery vendors in addition to enterprises. For many organizations this is as good as it gets. Debra Logan, Research Vice President MarketScope for E-Discovery and Litigation Support Vendors December 2007 The company s products are unique in that they have a proven trackrecord of court admissibility Vivian Tero, Sr. Analyst Worldwide Legal Discovery and Litigation Support Infrastructure

36 What the Financial Community is Saying P A G E 35 [Guidance Software has a] best of breed reputation and long history within the legal and compliance community. Roth Capital Partners Software Equity Research October 2007 Guidance Software s technology is a game-changer.spending in its sector (ediscovery) is currently skewed toward labor intensive and inefficient solutions for which Guidance Software offers significant ROI enhancement Morgan Stanley Software Analyst Team 2007 Research Report Guidance Software is the leading pure-play provider of ediscovery software Lehman Brothers Global Equity Research Group Market Research Report, May 2007

37 The World Leader in ediscovery & Digital Investigations Thank You