Call : (+91) 968636 4243
Mail : info@EncartaLabs.com
EncartaLabs

OpenText EnCase - eDiscovery

( Duration: 4 Days )

The OpenText EnCase - eDiscovery training course addresses the rapidly increasing need for electronic discovery in the corporate arena. Todays business litigation almost always involves some form of electronic evidence discovery. In many cases electronic mail, documents or other digital files are the clearest forms of evidence. This course provides instruction on using OpenText EnCase eDiscovery to efficiently gather and process electronic data.

By attending OpenText EnCase - eDiscovery workshop, delegates will learn:

  • Components of the EnCase eDiscovery product, including but not limited to how the process scales from addressing small to enterprise-wide discovery
  • Understand the differences between digital forensics and electronic discovery processes
  • Discuss various protocols used to plan and prepare for an effective, comprehensive electronic discovery procedure
  • Identify, observe and create custodians, sources and targets used during electronic discovery processes and collections
  • Import and create criteria, conditions and jobs to conduct pre-collection analytics and the collection of ESI (electronic sources of information)
  • Organize and import ESI in the form of:
    • Full disk images
    • Logical evidence files (LEFs) of various data, including PSTs
    • RAW PST files
  • Process the ESI by:
    • Creating conditions and criteria to process, manage and collect desired data
    • Crafting search expressions, including but not limited to keyword searches and hash value queries
    • Separating responsive files from non-responsive files
    • Forking or separating email related files from regular files
    • Creating a workflow to fork email, dedupe records and produce responsive records and entries
  • Use results of processing tasks to create output files for review, known as "deliverables"
  • Create and produce various reports describing collection and processing methodology and presenting the collected data

  • Good understanding of the concepts of computer forensics and the EnCase operating environment
  • Attend a training on OpenText EnCase - Building an Investigation or equivalent practical experience
The OpenText EnCase - eDiscovery class is ideal for:
  • Law Enforcement Officers, Computer Forensic Examiners, Corporate & Private Investigators & Network Security Personnel.

COURSE AGENDA

1

Day 1

  • Detailed discussions on current issues encountered during electronic discoveryprojects and how EnCase eDiscovery features and functions are mapped into theElectronic Discovery Reference Model (EDRM).
  • Data mapping.
  • Identifying custodians and targets.
  • Collection strategy.
  • Secondary culling.
  • Avoiding common collection obstacles.
  • Use of EnCase eDiscovery tools to help in the electronic discovery planning stage.
  • Examination of the Case Screening module, which provides the examiner with an overview of the composition from sampled data.
  • Instruction on how to use the Matching Files Exporter module to create a hash set of files that will be excluded or included during collections or processing.
  • EnCase eDiscovery configuration of a global-level Interface.
2

Day 2

  • Adding custodians and their ESI targets, such as workstations, laptops, shares, etc.
  • Importing custodian and target information.
  • Creating, managing and exporting global-level criteria.
  • Discussing methods of safeguarding data using global encryption keys.
  • Exploring and configuring the EnCase eDiscovery case-level interface.
  • Learning about the initial preview and determination of potentially relevant data called "pre-collection analytics" or "early case assessment."
  • Creating data sets to contain data that is culled during the electronic discovery workflow.
  • Running the pre-collection analytics function, which provides the framework for all future jobs, including:
    • Creating criteria/conditions
    • Creating jobs
    • Selecting targets
    • Creating a metadata-only logical evidence file
3

Day 3

  • Examining results of pre-collection analytics and using this information to craft collection jobs, which may be extremely targeted or extremely broad for future culling.
  • Importing additional evidence, including:
    • Full disk images received from the forensic team
    • Logical evidence files (LEFs), representing PSTs extracted from a server (perhaps a Microsoft Exchange server or an IBM Domino server) for different custodians. Each LEF must be assigned to the proper custodian.
    • Raw mail archives received from the appropriate information technology team.
  • Manual fork processing job of imported entries.
  • Manual deduplication processing job of recordsWorkflow to link together multiple jobs and data sets.
  • Internal jobs.
4

Day 4

  • Refining the criteria used with the workflow to include:
    • Keywords
    • Hash sets
    • Date ranges contained within file/email metatdata
  • Creating deliverables for output to:
    • EDRM
    • kCura relativity
    • EnCase LEFs
    • Email archive files
    • EnCase eDiscovery review native files
    • EnCase Review Package
    • Concordance
  • Creating and interpreting reports, such as:
    • Case screening report and matching files set
    • Result logs, as well as criteria and condition reports
    • Custodian and target listingGeneral meet-and-confer documentation
    • Other reports, including executive case summary, detailed job, custodian job history and exception

Encarta Labs Advantage

  • One Stop Corporate Training Solution Providers for over 6,000 various courses on a variety of subjects
  • All courses are delivered by Industry Veterans
  • Get jumpstarted from newbie to production ready in a matter of few days
  • Trained more than 50,000 Corporate executives across the Globe
  • All our trainings are conducted in workshop mode with more focus on hands-on sessions

View our other course offerings by visiting https://www.encartalabs.com/course-catalogue-all.php

Contact us for delivering this course as a public/open-house workshop/online training for a group of 10+ candidates.

Top
Notice
X