According to Barry Murphy, of Forrester Research, "e-Discovery technology spending will grow from $1.4 billion in 2006 to more than $4.8 billion in 2011 as enterprises realize that they have no choice but to prepare for electronic discovery." The simple reality is that there will be many different technologies acquired for electronic data discovery efforts - data capture, monitoring, and visual replay of content is at the very start of the process.
For legal and IT professionals alike, the old data-processing adage "garbage in - garbage out" truly applies. Without a reliable way to process massive amounts of network data for "legal hold - data preservation" obligations, more and more organizations will find themselves struggling to address the challenge of electronic discovery.
Content capture and replay can play a role in both pre-legal event auditing (such as policy audits) as well as during a legal action where it is key for the defending organization to do everything within its power to preserve the information required for legal proceedings.
In contrast, the benefits of proactive network content monitoring, capture, and visual replay far exceed the nominal implementation costs. Prior to an occurrence of a legal event, content capture also provides a way to audit adherence to policies and procedures thereby allowing for corrective actions to be sought.
To add to the electronic data discovery challenge, there are numerous data types ranging from emails and instant messages to voicemails, images, web pages that may be deemed pertinent to a case that may have to be reproduced in its original format. How does one get at all of this accomplished?
Chronicle Solutions has created a network content recorder that is able to easily and intelligently capture, replay and analyze the content in original format. And while this is an extremely easy-to-use and easy-to-learn solution, it is powerful in assisting investigators and legal staff to efficiently research, find and deliver credible evidence.
Whether the e-discovery investigation calls for the "anywhere-anytime" mobility provided by Chronicle’s netReplay® 2500 PORTABLE or the longer-term, proactive benefits found in netReplay® rack-mounted recorders, investigative and legal professionals will be armed with the most effective digital forensic tool available.
netReplay® will increase credibility of results by replaying exactly what, when, and how content was seen and handled by user, thereby demonstrating both proof of user’s content and related actions. In addition, Chronicle’s Forensic Information Fingerprinting Engine (FIFE™) provides evidence of user activity that is both forensically accurate and credible.
Out-of-the-box, netReplay® immediately captures data - just plug it in. netReplay® quickly and efficiently collects all information necessary for any litigation hold - preservation obligation, formal records retention and digital evidence collection. Equally important, netReplay® helps speed investigators quickly to the "document decision-ing" phase of their investigation.
netReplay® will increase the efficiency of a network forensics team by allowing more investigators, technical and non- technical personnel to be trained to use the tool. netReplay® is an easy-to-learn and easy-to-use digital forensic tool that provides immediate e-discovery benefits.
netReplay® has been described as a "One of a kind, Network Content DVR (Digital Video Recorder) that eliminates the digital equivalent of commercials." netReplay’s intelligent deep-packet inspection and content capture effectively cuts out the recording of duplicate data and network content "noise" thereby saving considerable investigative e-discovery time and money.
netReplay® has the ability to reassemble data that has already been collected in full packet capture sessions such as Wireshark (Ethereal) or tcpdump. However, by using netReplay® up front from the onset (on live network connection), investigative and legal staff quickly move from a reactive "capture everything" mode to a much more effective proactive "collect, monitor, research and analyze" approach.
netReplay® will greatly improve productivity by reducing the time and complexity of data and event log analysis. Essentially, with netReplay® investigators now have the means to find the proverbial "needle in a haystack" in hours versus weeks or even months.
netReplay® will increase the effectiveness of any e-discovery research effort by providing a high-level of precision on the target information it is collecting and analyzing - while complying with any legal requirements, such as privacy and employee rights and statutory limitations.