What is RSS?

Automate And Streamline Corporate Investigations

ONSITE³’s First Line Analysis™ Service provides legal, security/forensics, and information technology professionals with the immediate ability to save significant time and money in supporting legal requests, regulatory inquiries, and corporate investigations. With the increase in time-sensitive requirements without a corresponding increase in time available, ONSITE³’s First Line Analysis™ Service provides users the following benefits:

• More cases solved in less time with rapid discovery of evidence and facts.
• Less time required for investigations, which take minutes instead of days.
• Lower costs from eliminating the manual, time-intensive review of thousands of false positives.
• No redundant work, because of improved workflow and coordination within investigative teams.
• Accurate and timely tracking of past and present investigations.
• Greater productivity from eliminating manual processes and review steps.

>> Download Data Sheet

>> View Presentation

The Challenge:
More Investigations, More Email, But No More Time
Legal, security, and forensics teams face tremendous pressure along every dimension. The number of investigations continues to grow, as does the amount of email for analysis. Deadlines are increasingly aggressive, raising the urgency around rapidly and accurately determining who knew what, and when. Cost control remains a pressing concern, preventing teams from adding more people to cope with the greater workload. Additionally, with the amendments to the Federal Rules of Civil Procedure addressing discovery of electronically stored information (ESI), legal professionals need to be able to quickly prepare for the requirements driven by Rule 16 on Pretrial Conference and Scheduling Management.

In seeking to meet these demands, security and forensics teams have only archaic tools to help them. These simple "store-and-search" tools produce inaccurate or unreliable results, such as large numbers of "false positives". Because of this, today's corporate investigation process is onerous and time-consuming, requiring a large number of manual steps and significant re-work which, in turn, costs millions of dollars and leaves the organization vulnerable to substantial risk and financial exposure.

The Solution:
ONSITE³ First Line Analysis™
The ONSITE³ First Line Analysis™ service is designed to automate and streamline the corporate investigation process. The solution powered by Clearwell discovers, analyzes, and organizes all email found across the enterprise systems for the purpose of rapidly responding to legal requests, regulatory inquiries, and corporate investigations. Key capabilities include:

Achieve a single view into all email repositories: The First Line Analysis™ service provides a single, easy-to-use interface to any number of email repositories - Microsoft® Exchange Servers, online or offline PST files, journal servers, and 3rd party archives. Automatic analysis capabilities enable rapid analysis of past, present, and future email on an ongoing basis, eliminating the burden on security and forensics teams to reactively analyze email for each and every investigation.

Determine exactly who knew what, and when: Patent-pending algorithms link together all related messages into chronological threads which capture the entire discussion. This enables investigators to quickly identify all the participants, all emails, and all attachments related to their particular investigation, determining exactly who knew what and when. First Line Analysis™ creates discussion threads by not only analyzing the contents of emails and attachments, but also the metadata (e.g. subject, replies, forwards, CCs, etc).

Rapidly discover the most relevant evidence pertinent to investigations: First Line Analysis™ applies advanced weighting algorithms that consider the unique properties of email to return the most relevant, hit-highlighted emails and attachments first. The solution also automatically performs de-duplication across all repositories. This eliminates time-consuming, redundant analysis of thousands of false positives.

Track status of all investigations, past and present: First Line Analysis™ service’s customizable dashboards and analytics deliver complete visibility and monitoring of past and present investigation results. Users can drill-down into each case, enabling investigation teams to track group-to-group communications, critical investigation topics, relevant discussion threads, essential attachments, and more. The solution's secure, role-based access enables investigation teams to lock down internal and external investigators to specific content associated with just a particular case or set of cases.

Increase case review productivity: The First Line Analysis™ service’s comprehensive tagging capabilities and tag history database allows investigators to easily categorize, track and manage all messages, discussions, and attachments for each case. Investigation teams can apply status codes to all email for each case, apply critical notes to each email, and automatically assign email for review to any member of the investigation team.

Prove process integrity: The First Line Analysis™ service tracks every action taken by each investigator (e.g. login, logout, all searches and query terms, results, tags, print jobs, export jobs, and more) providing a full reproducible audit trail. The Service allows for the automatic production Activity Reports for any investigator and for any investigation across any time frame.

Maximum investigation flexibility through advanced search capabilities: The First Line Analysis™ service allows investigators to search for specific phrases, dates, header information, user groups, locations, and tags. The service provides the flexibility to include text variations such as plurals, alternate verb forms, and more in results, and can provide exact matching (via stemming) on literal search terms. Power users can leverage the full power of service by using freeform search, enabling wild card searches, fuzzy searches, proximity searches, range searches, and Boolean operations.

Produce proof and integrate with litigation support tools: The First Line Analysis™ service can print and export any range of emails to demonstrate that the relevant terms have been searched and resulting emails and attachments have been produced. Investigators can export results in multiple versions of the PST file format, password protect the files, and control the number of files created (one PST file for all mailboxes or an individual PST for each mailbox).

The Engagement:
Getting Started With The First Line Analysis™ service
Provided as a self-contained service appliance that easily integrates with leading data email archives and document repositories, the First Analysis Service can be quickly implemented to meet legal, security/forensics and information technology litigation, audit and investigation needs.

To learn more about ONSITE³’s First Line Analysis™ service, schedule a demonstration, or acquire the service to increase your control, capability, and capacity to conduct legal requests, regulatory inquiries, and corporate investigations, please visit the ONSITE³ website at www.onsite3.com or contact ONSITE³’s eForensics Team at 1-877-433-5227.