eDiscovery Journal

Custodian Working Styles – Key to Deciphering Decisions?

The recent raft of spoliation sanctions like Iacovacci v. Brevet Holdings, LLC seem to share fundamental misunderstandings around where key decision communications resided and how to preserve them. Broadly worded legal hold notices do indeed usually cover text and chat messages. Rarely do they convey practical instructions on preservation. In my opinion, these informal communication channels were once viewed as ‘non-records’ and avoided by [...]

By Greg Buckles|2021-07-31T09:11:41-05:00July 29th, 2021|Info Gov, Essay, Content Management, ESI Sources|0 Comments

Zapproved Placing Holds on Onna Slack Archives

Slack, Teams, Asana, Trello, Google Chat and other collaboration platform adoption has exploded in the pandemic driven remote work renaissance of 2020. Trading Platforms asserts that Teams daily active user count grew by over 93% since April 2020. 93%. Teams and other M365 sources can be preserved in place with some notable gaps. Onna is a cloud archiving player with a wide array of [...]

By Greg Buckles|2021-06-29T12:21:17-05:00June 29th, 2021|News, Legal Holds, ESI Sources|0 Comments

Disappearing Teams Recordings/Transcripts?

Have your held Teams recordings or transcripts vanished after 21 days? There is an explanation, though I feel like I am stuck in an M365 eDiscovery issue rut. Really, I would like to be writing about more positive topics. This one popped up outside my usual eDiscovery testing while working with a new tech startup that heavily leverages recordings/transcripts for customer research, feature stories [...]

By Greg Buckles|2021-06-24T15:05:20-05:00June 24th, 2021|Essay, Content Management, ESI Sources, Search|0 Comments

Teams Collections Complications – MC261534

M365 Teams collections are already challenging corporate eDiscovery and provider teams with hidden SharePoint and OneDrive sites. Today’s Major Change Update Notification (MC261534 - reproduced at end for non-admins) covers the June-July roll out of Roadmap ID 81945 that dramatically expands custodian’s ability to associate existing/other Teams sites and automatically create private channel sites. More importantly, non-admin custodians are losing the ability to manually [...]

By Greg Buckles|2021-06-14T10:55:15-05:00June 14th, 2021|Info Gov, Essay, Investigation, Preservation, Collectors, Collection, Legal Holds, Content Management, ESI Sources, Architecture, Search|0 Comments

Teams Transcripts – eDiscovery Gap

Teams transcripts are not currently available in M365 Content Search, eDiscovery or via the Graph API. As previously blogged about, Microsoft is busy consolidating the Microsoft 365 architecture to improve search and other functionality. There are obvious issues with working on the car while your customers are driving it, even when it is the most efficient solution. As of October 2020, the default Teams [...]

By Greg Buckles|2021-06-09T16:10:47-05:00June 9th, 2021|Essay, Collectors, Collection, Legal Holds, Processing, ESI Sources, Search|0 Comments

Quick Performance Tip for AED2 Processing

A peer with a looming deadline messaged me yesterday to ask if I knew of any way to export Advanced eDiscovery (AED2) collections without processing them into a review set. Despite a vague recollection from the Spring 2021 AED webinar of a MSFT PM saying that a ‘direct to export’ collection feature was on the road map I could not find confirmation. At this [...]

By Greg Buckles|2021-05-26T11:18:52-05:00May 26th, 2021|Platform, Essay, Collectors, ESI Sources, Search|0 Comments

Aryaka Global WAN Report Take-Aways

What can a 1,350 global enterprise survey tell us about the evolving composition and location of ESI? Although Araka’s fifth annual survey is focused on WAN and security infrastructure, it contains nuggets with eDiscovery impact. Over 80% of respondents expect more than 25% of workers to remain remote, confirming that the hybrid work environment is here to stay. 46% of respondents have deployed over [...]

By Greg Buckles|2021-03-23T15:30:21-05:00March 23rd, 2021|Essay, Global, ESI Sources, Architecture|0 Comments

Enterprise Classification – Minimizing the Impact of Data Breaches

Typical Response Tasks · Preservation · Forensics · Log analysis · Malware reverse engineering · Surveillance · Remediation · Endpoint detection & response · Exfiltration – eDiscovery · Physical security · Regulatory compliance · Consumer notification · Legal response · Law enforcement liaison The latest Microsoft Exchange breach moved downstream to 60,000+ SMB victims from the Solar Wind’s hack that targeted Microsoft and government [...]

By Greg Buckles|2021-03-07T15:47:22-06:00March 7th, 2021|Analytics, Essay, Content Management, ESI Sources, Architecture, Search|0 Comments

Handling M365 AED Unindexed Content

A question to the eDiscovery Facebook group asked how others were handling the unindexed items reported in M365 core and AED searches. If you have not run M365 eDiscovery searches yet or not noticed the Status section of the search detail page, it provides the item count and volume of ‘unsearchable items’ in the sources that your search. In my recent legal hold validation [...]

By Greg Buckles|2021-03-03T18:04:28-06:00March 3rd, 2021|Essay, ESI Sources, Architecture, Search|0 Comments

Hackers Targeting M365 eDiscovery Services

Thanks to my friend Jason Velasco for drawing my attention to the article Hidden Dangers of Microsoft 365’s Power Automate and eDiscovery Tools. Hitesh Sheth at DarkReading.com is extrapolating from a massive data collection study from 4 million Cognito Detect for Office 365 customers by Vectra. I am not sure that I agree with his red flag alert that hackers are actively using Power [...]

By Greg Buckles|2021-02-10T10:29:24-06:00February 10th, 2021|Essay, Security, ESI Sources, Architecture|0 Comments