Architecture

M365 AED Collections – Not Actually Collected

The latest update to the M365 Advanced eDiscovery console is on their way to your or your client’s tenant. While this change seems to be primarily cosmetic (renaming Searches to Collections tab), there are some important things going on under the surface. In my recent blog on Handling M365 Unindexed Content I explained how AED automatically processes and reindexes partially or unindexed items placed [...]

eDJ Brief: ZyLab ONE

Slowly but surely I am resuming regular briefings with providers. I remember when ZyLab first jumped into the US eDiscovery market with their hybrid archive/investigation tool. Thanks to Scott Hunter for walking me through their most recent release. In my not-always humble opinion, ZyLab always reminded me of Nuix. An innovative, independent architecture paired with a techie GUI that lagged the US market leader’s [...]

Enterprise Classification – Minimizing the Impact of Data Breaches

Typical Response Tasks ·   Preservation ·   Forensics ·   Log analysis ·   Malware reverse engineering ·   Surveillance ·   Remediation ·   Endpoint detection & response ·   Exfiltration – eDiscovery ·   Physical security ·   Regulatory compliance ·   Consumer notification ·   Legal response ·   Law enforcement liaison The latest Microsoft Exchange breach moved downstream to 60,000+ SMB victims from the Solar Wind’s hack that targeted Microsoft and government [...]

Handling M365 AED Unindexed Content

A question to the eDiscovery Facebook group asked how others were handling the unindexed items reported in M365 core and AED searches. If you have not run M365 eDiscovery searches yet or not noticed the Status section of the search detail page, it provides the item count and volume of ‘unsearchable items’ in the sources that your search. In my recent legal hold validation [...]

By |2021-03-03T18:04:28-06:00March 3rd, 2021|Essay, ESI Sources, Architecture, Search|0 Comments

Hackers Targeting M365 eDiscovery Services

Thanks to my friend Jason Velasco for drawing my attention to the article Hidden Dangers of Microsoft 365’s Power Automate and eDiscovery Tools. Hitesh Sheth at DarkReading.com is extrapolating from a massive data collection study from 4 million Cognito Detect for Office 365 customers by Vectra. I am not sure that I agree with his red flag alert that hackers are actively using Power [...]

By |2021-02-10T10:29:24-06:00February 10th, 2021|Essay, Security, ESI Sources, Architecture|0 Comments

The Real Reason Windows Can’t Find Bruce’s OneDrive Files

I found this article last August when I encountered the M365 eDiscovery search error  I recently announced. It is out of date on a couple points, but it has been sitting in my News list because Bruce does a very good job of putting Microsoft Search evolution in context. It is unlikely that the eDiscovery service issue I found contributed to Bruce’s erratic search [...]

By |2021-02-01T17:20:20-06:00February 1st, 2021|News, Architecture, Search|0 Comments

M365 eDiscovery Search Alert

For enterprise on M365 E3/E5 that have been running keyword searches to export data from OneDrive and SharePoint for discovery in 2020, you may have had a problem. This will be a long piece, so I will try to pack the important parts up front. Last August, while testing the new online Microsoft  (“MSFT”) Word transcription feature I stumbled onto what appeared to be [...]

By |2021-01-31T10:55:04-06:00January 31st, 2021|Essay, Collectors, Legal Holds, Architecture, Search|0 Comments

Exterro and the eDiscovery Patent Game

I fell down the eDiscovery patent rabbit hole while researching Exterro’s recent press release on the patent granted on their Gateway Coordinator. You should never take press releases, white papers, blogs, etc. at face value. Go to the source when possible. In my USPTO search for the announced patent, I stumbled across 7 more Exterro patents covering workflow management, custodian monitoring and predictive search. [...]

It’s a Jump to the Left – Relativity Acquires VerQu

Relativity’s acquisition of VerQu makes a lot of sense from the corporate RelativityOne customer perspective. Once integrated, the VerQu Hydra connectors have the potential to dramatically expand the scope of holds, in-place searches and collections. The pandemic has escalated adoption of Teams, video conferencing and a myriad of collaboration platforms that Hydra already gives customers access to. In a happy coincidence, VerQu was on [...]

Solargate: A Global Trojan Horse in the Supply Train

Good summary and perspective by Doug. First a bit of context and techno translation. The Orion Platform is SolarWinds’ primary systems management bundle for on-premise and hybrid environments. SolarWinds’ products cover the breadth of IT management. That means the hacked version of Orion gave the hackers potential access to servers, applications, databases, storage and more. I have struggled to keep up with the new [...]

By |2020-12-17T11:27:47-06:00December 17th, 2020|Compliance, News, Privacy, Security, Architecture|0 Comments
Go to Top