Pinpoint Labs ESI Collection Tools

Transcription

1 Pinpoint Labs ESI Collection Tools Pinpoint Labs offers two separate product families that enable users to perform defensible electronically stored information (ESI) collections. The products are SafeCopy and Harvester and they offer users a wide variety of features at different price points. Below is a comparison chart of the different Pinpoint Labs product features available: PRODUCT FEATURES HARVESTER SAFECOPY Great for Legal Holds Preserve Metadata and Time Stamps Filter by Extension and Date Range Select from Multiple Data Sources Compatible With All Electronic Discovery and Litigation Platforms 100% File Copy Verification Extensive Chain of Custody Process File Lists Resume Easily Supports Path Lengths Greater Than 255 Characters Transfer Licenses Quickly To Another Location Easily Save and Reuse Job Settings Supports Path Variables Remotely Launch and Monitor Job Progress Keyword Filter MS Outlook PST s Keyword Filter Lotus Notes NSF Files Keyword Filter Loose Files Keyword Filter Attachments Keyword Filter Archives Dedupe and Filter Multiple PSTs Regenerate New PSTs Export s To 8 Different Message Formats Remove System Files Listed In NSRL (denisting) Filter By Header Signature Create Portable and Automated Collection Jobs Preconfigured Work Orders In-House, Production-Level Culling (denist/dedupe) Scriptable Profiles and Collection Jobs Create and Deploy Remote Collections Remotely Launch and Monitor Job Progress Identify password protected and encrypted files Harvester ESI Easy Vault

2 Licensing options include versions which can be installed on individual computers, portable drives, servers or across an enterprise. Listed below are licensing options for SafeCopy and Harvester products.licensing OPTIONS SafeCopy and Harvester PRODUCT SafeCopy 2 Desktop SafeCopy 2 Nomad SafeCopy 2 Server Harvester Portable Harvester Server Harvester Enterprise Harvester Collection Kit Net Harvester LICENSING OPTIONS Licensed to an individual computer. Portable license that runs from a flash drive or hard drive. Nomad can be easily transferred between devices in different locations. Runs from a central location allowing any computer with access to launch and run a job on the host computer. Portable license that runs from a flash drive or hard drive. Portable can be transferred between devices in different locations. Runs from a central location allowing any computer with access to launch and run a job on the host computer. Jobs can be remotely launched through the scripting interface, link, or Net Harvester. Often includes a combination of Harvester Server and Portable licenses for larger installs that include dozens or hundreds of servers and client licenses. Provides a single use collection license. Complete kits including hard drives and preconfigured job tickets are optional. Allows users to remotely launch and track Harvester jobs from a central location. Jobs are flagged and color coded based on job status. Net Harvester maintains a custodian list and can automatically link jobs to sources. Creating basic collection jobs in SafeCopy and Harvester can be completed in just a few steps. SafeCopy and Harvester can detect network outages and are designed to continue once a connection is reestablished. Incomplete or cancelled jobs can be easily resumed after the last hash verified file. Additional statistics appear to the Harvester progress dialog and include the number of relevant items identified that match keyword search criteria. EARLY DATA ASSESMENT Harvester allows users to capture detailed statistics related to the scope of the project without collecting files. During the enumeration phase, Harvester will calculate file type counts, sizes and categorize matching documents, files from archives, s, and attachments into common categories including where files are located.

3 PORTABLE ESI COLLECTION KITS Both SafeCopy and Harvester can be installed on external drives, shipped to clients and used to collect relevant files. If an automated collection is desired, Harvester users can create preconfigured job tickets that will run from a portable drive. Pinpoint Labs provides one time use licenses or complete kits including drives and handles shipment to the client location. REMOTE COLLECTIONS When a remote collection is required, SafeCopy and Harvester Server can run from a central location and launch on custodian PC s or file shares. If users do not wish to remotely access the local PC, then Harvester provides additional options to launch a job remotely via the scripting interface, third party utilities, link within an message, or using Net Harvester software. Harvester remotely launched jobs can be run in silent mode and in the background on the client PC. Jobs can also be monitored through Net Harvester. SECURE COLLECTED DATA Harvester can seamlessly write documents and s to TrueCrypt containers. TrueCrypt is free opensource, well respected, and popular disk encryption software that is used to secure data stored on drives and file containers. PRESERVE ESI PROPERLY In a time where you constantly hear about cost effective ways to perform defensible ESI collections, our SafeCopy and Harvester products can be useful tools in your and your client s arsenal. With licenses starting at less than $500, even the most budget conscious clients can afford tools that are relied on every day by many computer forensic, legal and corporate IT professionals.

4 Forensically Sound File Collection Incomplete and undocumented electronic discovery collections occur every day. The result of mishandling these files can be costly, to both the client and their legal counsel. Proper file collection methods should be discussed at the beginning of each case. When collecting files for electronic discovery, you should use processes and applications that preserve and verify collected electronic files with minimal impact on client systems. Without these, creating defensible and verifiable electronic discovery productions and evidence authentication is difficult, if not impossible. SafeCopy 3 is offered in several different formats tailored to fit your needs and the needs of your project. Now you can quickly and easily obtain defensible forensically sound active file collections. SAFECOPY 3 FEATURES Select from multiple data sources (file shares, individual files or file lists) Supports paths greater than 255 characters (up to 32,000) Resumes automatically after network outages Multithreaded 100% file copy verification (using MD5 hash comparison) Preservation of file system timestamps and metadata Filter by file extension (inclusion, exclusion and use file extension) and date range SafeCopy 3 Desktop - Installed on the local computer - Licensed to a single system - Capable of accessing all local and networked devices SafeCopy 3 Server - Perfect for companies with ongoing collection needs - Freedom to use Safecopy 3 on any computer on your network - Runs from server, external USB or NAS device - Small footprint - No installation required SafeCopy 3 Nomad - Easily distribute temporary SafeCopy license - Perfect for clients who have a one time, short term collection project - Hassle free - no USB drive or software to track or return - Runs from external hard drive, flash drive or server - Create job file for automated collection 8246 Oddo Circle Murray, NE Desktop. Server. Nomad.

5 harvester portable HARVESTER SERVER HARVESTER ENTERPRISE HARESTER SELF COLLECT KITS POWERFUL ESI COLLECTION SOFTWARE Identify and Collect Law firms and Corporate Legal Departments now have a very cost effective solution to reduce their ESI collections to a more relevant and manageable size. Thus, saving themselves and their clients thousands of dollars per legal hold/law suit. Whether you are doing remote collections across the network collecting 100 s of custodians or you are filtering your collection down by keyword searching you can see why Harvester is being used by government agencies, law firms, and Fortune 500 companies across the world. Pinpoint Labs Harvester software has now gone from a collection/ preservation tool to a multi-purpose filtering/culling tool that can be used at the point of collection or for in-house processing. HERE ARE JUST A FEW THINGS HARVESTER 2.1 CAN DO Harvester 2.1 Features } Early Data Assessment (EDA) Reports } Keyword filter Active MS Outlook Accounts (Exchange, Yahoo, etc.) } Identifies non-searchable/encrypted files } Harvester ESI easy Vault (Custodial Drag and Drop window) } Write files to TrueCypt volume for security } DeNIST and Dedupe } Use with Portable ESI Self Collection Drives/Kits } Keyword filter MS Outlook PST s, attachments, loose files and archives } Dedupe across multiple MS Outlook PSTs } Create new PSTs or 8 different formats from filtered messages } Search multiple timestamps } Create file summary and file lists from filtered file and messages } New exclusion log for excluded file types } Set expired licenses for Harvester Portable using Portable License Manager (PLM) } No per gig fees and No per Custodian fees PINPOINT L A B O R A T O R I E S } w w w.pinpointl a b s.com } 8246 Oddo Circle } Murray, NE } } } p r e s e rv e. } c o l l e c t. } f i lt e r.

6 CONTROL COLLECTION TOOLS REMOTELY QUERY THE NETWORK FOR COMPUTERS START, STOP AND RESUME JOBS NO CLIENT SIDE INSTALLATION RUNS FROM A SINGLE NETWORKED PC SEE JOBS RUNNING IN NEAR REAL TIME FILE COLLECTIONS JUST GOT A REMOTE CONTROL FULL CONTROL OF YOUR COLLECTIONS Do you know what it feels like to be in control of an F-16? We don t either but we can give you the tools to be in full control of your collections. Pinpoint Labs Net Harvester software brings you real time stats from the field. Gives you multiple filtering options to track what processes are being done across the network, and most importantly allows you to remotely launch jobs. This can be done in stealth mode, launched via an , or network script. If you need some end user interaction you can take advantage of our Harvester ESI EASY Vault. Net Harvester allows you to hold, release, delete, and resume jobs from a central location. It also can inventory all of the sources or custodians that reside on the network. This will save you countless hours of walking around the job site checking on the custodians computers. NET Harvester Features } Automatically generates a computer list of all the computers that reside on the network. } Customize the list to reflect custodians, etc. } Specify the number of licenses to use } Hold Jobs. Release Jobs. Delete Jobs. } Set Credentials } Set Job Priorities B A A: STEALTH MODE LAUNCHED B: CHECKING CUSTODIANS COMPUTERS PINPOINT L A B O R A T O R I E S } w w w.pinpointl a b s.com } 8246 Oddo Circle } Murray, NE } } } p r e s e rv e. } c o l l e c t. } f i lt e r.

7 Are you looking for a robust application that can help you deal efficiently with Microsoft SharePoint documents and related items? Have you found your choices limited and expensive? Pinpoint Labs has released the SharePoint Collector (SPC) that is affordable, easy to use, and provides a defensible means of collecting discoverable information from SharePoint enterprise and cloud sites. Targeted SharePoint Collections Want to quickly locate all SharePoint list items created or edited by a user? SPC allows you to quickly export document libraries, as well as perform targeted collections when needed, dramatically reducing the collection size and overall project costs. Common electronically stored information (ESI) relevant to a litigation is often stored in SharePoint sites, but companies struggle in meeting their production requests. They find the built-in search and retrieval features don t provide a means to satisfy their requirements and don t know where to turn. Easy Data Export With Metadata Once a user selects relevant items, SPC exports those items to the location of choice. Files can be stored on a portable drive or saved to server locations (SANS/NAS). The resulting files include the associated metadata and detailed chain of custody that lists the date/time, hash value and other details that ensure a fully defensible ESI collection. No Local Installation Required Like other Pinpoint Labs products, SPC can be run from a flash drive or external hard drive without any local installation. In fact, remote collections have been completed where users only need access to the SharePoint website link and can collect data from a secure location. This significantly reduces hurdles often encountered by the IT staff in trying to service many requests. Pinpoint Labs ESI collection products are relied on every day by many Fortune 500 companies, government agencies, and legal departments worldwide. You can request a free copy of Pinpoint Labs SPC tool and find out how much easier it is to satisfy production requests and save money, too. SHAREPOINT COLLECTOR (SPC) FEATURES: Retrieve Contents From All Sites (intranet portals, extranet sites, Internet and cloud locations) Collect Everything (documents, lists, calendar, contacts, announcements, attachments, Wiki, blogs) Extract File Metadata (embedded information that traces history, access or usage) Maintain Chain of Custody (evidence not altered or changed from the time it was collected) Collect Relevant User Data (ID, name, address, personal profile, etc.) Do Differential Collection (searching only for files that have changes or have been added) Retain Folder/File Structure and Display File Lists Run from Flash/USB Drive and Resume Incomplete Jobs Oddo Cir, Murray NE, or Preserve. Collect. Filter