79 results about "Electronic discovery" patented technology

A set of trigrams can be generated for each document in a plurality of documents processed by an e-discovery system. Each trigram in the set of trigrams for a given document is a sequence of three terms in the given document. A set of trigrams for each similar document is then determined based on the set of trigrams for the original document. To facilitate identification of the similar documents, a full text index is then generated for the plurality of documents and the set of trigrams for each document are indexed into the full text index, as individual terms. Queries can be generated into the full text index based on trigrams of a document to determine other similar or near-duplicate documents. After a set of potentially similar documents are identified, a separate distance criteria can be applied to evaluate the level of similarity between the two documents in an efficient way.

Various systems and methods for managing electronic discovery are provided. In one example, a method for facilitating a cross-team, role-based workflow for task management on a computing device comprises sending a project request to a business coordinator, the project request received from a legal/compliance team member, assigning work required by the project request to a discovery coordinator based on input received from the business coordinator, and performing the work required by the project request by assigning one or more projects to one or more collection/preservation teams based on input received from the discovery coordinator.

Systems and methods for collection of volatile forensic data from active systems are described. In an embodiment of the methods, a selected set of forensics data items can be selected. Runtime code capable of launching data collection modules from a removable storage device with little or no user input is generated and stored on the device. The collection of forensic data can then be accomplished covertly using the removable storage device by a person with minimal training. In another embodiment, pre-deployed agents in communication with servers and controlled by console software can collect forensic data covertly according to schedule, immediately at the command of an analyst using a remote administrative console, or in response to a triggering event.

Embodiments of the invention relate to systems, methods, and computer program products for improved electronic discovery. More specifically, embodiments relate to monitoring or otherwise “watching” the online and/or offline activity of specified computing devices in an enterprise wide electronic discovery system. By determining when a computing device is online/offline and notifying a requesting party of the online/offline status, the requesting party knows when the specified device is available for electronic discovery functions, such as collecting data from the computing device or the like. The monitoring application of the present invention eliminates the need for the requesting party to wait for prolonged periods of time for a computing device to come online or to randomly attempt to find a computing device on line.

A cost and quality controlled system for transforming collections of computer files and other electronically stored information by iterative culling and sorting so that production of relevant information can be made within estimated time and costs ranges and precision and recall ratios.

A method and apparatus is taught that removes or minimizes human participation in the collection or hold process, pursuant to electronic discovery, in a robust, fast, transparent, and legally defensible manner. Also disclosed is a method and apparatus that ensures a robust and defensible way of communicating electronic discovery collection and hold requests from electronic discovery management systems to disparate data sources in a uniform way.

There is provided a computer-executable method for ordering documents for review in response to an electronic discovery request. The method involves determining, by a processor, one or more metrics of the documents, the one or more metrics indicating at least one of privilege and responsiveness of the documents. The method also involves estimating a relevancy of the documents according to the metrics. The method also involves ordering the documents from most relevant to least relevant according to the relevancy, receiving relevance feedback from a first document reviewer, updating the order according to the relevance feedback, and sending a first subset of the updated ordered documents to a second document reviewer for review.

Systems and methods are disclosed for performing duplicate document analyses to identify texturally identical or similar documents, which may be electronic documents stored within an electronic discovery platform. A process is described which includes representing each of the documents, including a target document, as a relatively large n-tuple vector and also as a relatively small m-tuple vector, performing a series of one-dimensional searches on the set of m-tuple vectors to identify a set of documents which are near-duplicates to the target document, and then filtering the near set of near duplicate documents based upon the distance of their n-tuple vectors from that of the target document.

Systems and methods for efficiently processing electronically stored information (ESI) are described. The systems and methods describe processing ESI in preparation for, or association with, litigation. The invention preserves the contextual relationships among documents when processing and indexing data, allowing for increased precision and recall during data analytics.

The present invention concerns an electronic forensic tool for conducting electronic discovery and computer forensic analysis. The present invention allows a non-technical person such as a non-forensic expert to conduct electronic discovery and thereby obviate the need for an expert in many situations. The present invention allows for electronic discovery in a forensically sound manner. The present invention also concerns a business method for electronic discovery involving a software program and a command server for generating expanded functionality. The client software may be distributed at minimal or no cost, preferably as a CD. Using the client software, a user boots a target machine to determine whether a target machine contains data of interest. The client software will, however, only display limited data such as file information, date, last modified, and file size. To access and examine the actual underlying data, the user must obtain additional functionality, e.g. by purchasing a command block from the control server. The additional functionality will allow the client program to extract the data of interest or the entire contents of the target machine to an external device for further analysis.

An electronic discovery archive can continuously pull documents and store them in a way that makes it easy to discover and put documents on litigation hold, independent of the native storage used by a given application. Users can continue to modify documents on litigation hold, and revisions are tracked and saved in the archive to comply with the litigation hold. A legal discovery system can then operate against the archive.

Full text index-ability, indexing, and container extraction status of files in a collection repository is displayed to a user in connection with content management in EDiscovery. Thus, the user knows which files failed to index and explode and which files that are not indexable. The user also knows which files have not been indexed yet, so they are not omitted from an analysis. Accordingly, users can start working on collected files without waiting for the maximum possible indexing period. Further, users can start working immediately on the collected content, thus avoiding slowing down the work during frequent updates to the content repository. Only indexing and extraction status information that is relevant to the search query is displayed, thus minimizing the time needed to analyze the files that are not indexed or not exploded manually. Automatic and manual update of a list of un-indexable file types is provided, based on historical information collected during collection repository operation, thus enhancing the user experience with time and adapting the EMA to new file types. Further, both the person who performed the collection and the person who manages the EDiscovery effort are kept informed about the processing status of the collection by sending notifications, displaying alerts, and by providing appropriate views.

Provided are systems and methods for remote collection, preservation, and analysis of computer-based evidence in the course of conducting a network-based forensics or electronic discovery service. The challenge is to collect and analyze Electronically Stored Information (ESI) in a forensically sound manner over public and private networks. This is achieved via network-based forensics that may be conducted via an end user computer communicating directly with one or more subject computers across public or private networks, or it may be achieved via a “cloud computing” model whereupon the end user obtains, from the Internet, temporary use of shared resources, software, and information for the purpose of conducting digital forensics and eDiscovery upon subject computers.

A tool implemented in an apparatus is presented. The tool comprises one or more processors, one or more memories communicatively coupled to the one or more processors and storing instructions which, when processed by the one or more processors, cause: obtaining report data generated for a user query; using a first color scheme, generating a visual representation of the report data; displaying the visual representation of the report data on a display of a user device; receiving, from a user, a user selection of a second color scheme; and using the second color scheme, automatically updating the visual representation of the report data, and displaying the updated visual representation of the report data on the display of the user device.

In an automatic electronic discovery search tool, documents can be clustered into a cluster hierarchy according to a first clustering approach. Once a hierarchy tree is created, portions of the tree can be flattened for application of a second superior clustering approach. Clustered portions may be used in a document review tool or further filtered according to specified criteria. Clusters may be filtered or used in a document review tool.

Systems and methods for identifying and redacting privileged information automatically in electronic discovery documents such as emails are disclosed. In reviewing documents for discovery review, some documents have both privileged and non-privileged information. Significant cost savings are achieved in conducting electronic discovery by automatically identifying and redacting privileged content while preserving non-privileged information for production.

Various embodiments of a system and method for enabling electronic discovery (e-Discovery) searches to be performed on backup data in a computer system are disclosed. The system and method may operate to receive backup data for a set of files and backup catalog information indicating meta-data for the files, such as the data locations of the files within the backup data. The system and method may also receive event data indicating access history for the files, and may create e-Discovery mapping information based on the event data and the backup catalog information. The e-Discovery mapping information may map file access events specified by the event data may to the meta-data for the respective files in the backup data. The e-Discovery mapping information may enable the backup data to be searched to find files relevant to a legal proceeding or investigation.

Given a set of documents relevant to a litigation hold and a seed set of keywords, a second set of keywords can be generated and suggested to a user. Each document in a training set of documents is given an indication of relevance. Based on the indication of relevance, a set of further keywords relevant to the litigation is extracted from the documents and suggested to a user. The suggested set of keywords may or may not include keywords in the seed set. Additionally, the suggested set of keywords may be related to the seed set of keywords.