Monday, May 26, 2008

litsupport summary for the week ending on 5/25/08

A lot of important and useful information is posted to litsupport each week. The following is a distilled summary, in the form of questions and answers.

Q. Project management software off the shelf?
A. MS Project has tons of feature but complex to learn; for smaller projects - online. With EDD bent, Mindmanager, CaseLawg; Free open source alternative to MS Project = OpenProj, on-line hosted version =; Exterro designed specifically for eDiscovery.

Q. How to take a video depo and place it on a GUI with transcribed text, so that you could jump to keywords in the text and it would take you to the time it was said on the video?
A. DepoView from inData, TimeCoder Pro from inData.

Q. How to forensically image a drive for a Sony VAIO laptop?
A. VAIO laptop are especially hard to take apart, so possible solutions are: EnCase with a crossover cable; image it by using a forensic boot CD (Helix is good) and image it using that process. It is slower but safer; Apricorn device with software;

Q. How to virus scan data received from client?
A. (EDDLabs): Two separate scans using different software: (1) on server as data is copied to working set and hashed; and (2) on workstation as individual files are accessed. Infected files are cleaned/repaired and rehashed prior to processing. Repaired file ("child" or "clone") has different hash than infected file ("parent"
or "original"). Infected files failing repair are reported as exceptions.
SVDD: Unpack to stand-alone Unix box and virus scan, creating an infected files report. Create processing corpus that excludes infected files. Before delivery, virus check on stand-alone XP box.

This summary from the Litsupport Group postings created by the wonderful and talented members of the group has been culled by Mark Kerzner ( and edited by Aline Bernstein (

No comments: