Guide 4: Finding the Evidence - A Lawyer's Map of Modern Electronic Data Sources
Guide 4. Finding the Evidence: A Lawyer's Map of Modern Electronic Data Sources
Computers, phones, email, cloud platforms, Teams, Slack, file servers, NAS, SaaS, databases, CCTV, backups, CRM, ERP, social media, messaging apps, logs, IoT and third parties - where evidence lives today, how volatile each source is, and how to map a client's estate before anything disappears.
10 Family 5: structured systems - databases, accounting, CRM, ERP
11 Family 6: messaging and social - Whats App, Signal, SMS, social media
12 Family 7: logs and the physical world - CCTV, access control, IoT, web logs
17 Worked example 1: mapping Aldgate's estate in a fortnight
18 Worked example 2: the opponent's estate - Harlow, its MSP and the backup vault
36 How a specialist laboratory can assist
Volatility: preserve in volatility order, argue in importance order. Days to weeks - act same day. Weeks to months - act in week one. Months - act before the window closes. Quarters to years - scheduled threats. Stable until touched.
Cite as: Joseph Naghdi, Guide 4: Finding the Evidence - A Lawyer's Map of Modern Electronic Data Sources, Computer Forensics Lab, https://e-discovery.uk/library/finding-the-evidence-a-lawyers-map-of-modern-electronic-data-sources/pdf.