A consideration of eDiscovery technologies for internal investigations

Abstract

Internal incidents that implicate security or data privacy considerations require present-day forensic scientists and investigators to craft a narrative that explains both “what” happened within the system during the incident, and “why” it matters to the organization. To explain the “why,” investigators are increasingly utilizing tools outside of the traditional forensic and investigatory practices. One such tool set is comprised of techniques used and refined in the practice of eDiscovery. This paper examines those techniques and presents instruction and advice on their application within forensic and investigatory practices.