A client of ours asked if we knew of any SW products that can comprehensively scan all hard drives for all employees (both in their corp offices and those the work remote) for specific documents and documents containing specific terms. They were subpoenaed by the DOJ and need to do this in a very aggressive time frame. They've already thought about google search - that won't work. They have office 365 and there are limitations with that too. Is anyone aware of such a tool or product?
Need to scan all hard drives - subpoenaed by the DOJ
Answers
A Google on "Forensic hard drive scans" yielded a bunch.
This is an example:
http://www.gfi.com/blog/top-20-free-digital-forensic-investigation-tools-for-sysadmins/
Thanks Wayne
EnCase from Guidance Software has an enterprise version that can scan all hard drives on a network in a forensically sound manner, but it isn't free. Have they checked into having this done by a third party? There could be issues with chain of custody and evidence handling, since this is apparently a legal matter, and an outside party can provide a layer of protection from questions of the data integrity and completeness. Documentation of where the document was found, how it was retrieved and preserved will be important during the collection phase as well.
Filed Under:
Technology