| Name | Description | RM | ID | HD | Col | Proc | Rev | Anl | Prod | Pres | PM | Oth |
| Audit Trail |
System securely logs and reports on actions |
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
No
|
No
|
No
|
| Concept Search |
Advanced index that extracts concepts |
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
| Domain Analysis |
Extraction of domain level communication patterns from ESI |
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
| Indexed Search |
Creation of an index for search |
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
No
|
| Crawl Search |
Use of GREP or other search that actively checks files without creation of index. This is a point in time search. |
Yes
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
No
|
No
|
No
|
No
|
| Metadata Culling |
Removal and suppression of ESI by type, date and other metadata properties |
Yes
|
No
|
Yes
|
Yes
|
Yes
|
No
|
Yes
|
No
|
No
|
No
|
No
|
| Performance Metrics Analysis |
Automated tracking and analysis of metrics associated with discovery steps and phases. The results of the metrics analysis are presented via summary dashboard or reports to enable iterative feedback to optimize and correct processes. |
No
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
Yes
|
No
|
No
|
No
|
| Inventory |
Generates a file inventory or catalogue of the targeted data sources |
No
|
Yes
|
Yes
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
No
|
No
|
| Response Workflow |
Tracking and workflow system that documents event response actions |
No
|
Yes
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
No
|
Yes
|
No
|
| Stealth Investigation |
Ability to search, browse and collect from custodians's data sources without alerting target custodian or impacting their system adversely. |
No
|
Yes
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
No
|
No
|
No
|
| Non-text File Detection |
Detects image, audio, animation and other non-textual file types and attachments. May have workflow capabilities |
No
|
Yes
|
No
|
No
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
No
|
| Chain of Custody |
Automated creation of Chain of Custody documentation that tracks collection and transmission of ESI. |
No
|
No
|
Yes
|
Yes
|
Yes
|
No
|
No
|
Yes
|
No
|
No
|
No
|
| Custodian Collection |
Web based or enterprise application that assists Custodians in designating and collecting ESI. |
No
|
No
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
No
|
No
|
No
|
| Forensic Image |
Physical level forensic copy of the media that includes all slack space, deleted files, fragments and other content. |
No
|
No
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
No
|
No
|
No
|
| Forensically Sound Copy |
Verified content, file metadata and system metadata by Hash and properties check. Many applications also generate a Chain of Custody log |
No
|
No
|
Yes
|
Yes
|
No
|
No
|
No
|
No
|
No
|
No
|
No
|
| Text Extraction |
Extract raw or formatted text from ESI |
No
|
No
|
No
|
No
|
Yes
|
No
|
No
|
Yes
|
No
|
No
|
No
|
| Metadata Extraction |
Extracts file and system metadata from files and communication systems. |
No
|
No
|
No
|
No
|
Yes
|
No
|
No
|
No
|
No
|
No
|
No
|
| Parallel Review |
Supports complex parallel simultaneous reviews on a single matter/collection. This can include different tagging rules, groupings and filters. The core function is the ability to host overlapping independent review workflows on the same matter. |
No
|
No
|
No
|
No
|
No
|
Yes
|
No
|
No
|
No
|
No
|
No
|
| Review Native ESI |
Review and designate ESI in native or original format |
No
|
No
|
No
|
No
|
No
|
Yes
|
No
|
No
|
No
|
No
|
No
|
Phase Columns: