How organizations share and store data, from servers to portable devices, to the cloud and increasingly the internet of things (IoT), is changing and is taking place in a progressively decentralized manner. This increase of data presents significant risks, from fraud to data leaks.

It is important for the eDiscovery and Forensics sector to have easily accessible data, maintaining the integrity of evidence.

eDiscovery – the collection, preservation, analysis, and reporting of data. Concentrating mainly on active data that is easily available through file storage and other program managers that businesses or individuals use, the eDiscovery team collects this data and passes it on to investigators to establish whether it has been tampered with or altered in any way.

Digital Forensics – when a deeper investigation into the data is required. A digital forensic specialist will search through data sets for hidden or deleted data.

It is of the highest importance that data collected by eDiscovery specialists and investigated by Digital Forensics remains protected and secure. Copies of files need to be made, ensuring that no alterations or modifications are made to the original source data.

Securing data with encryption is a useful tool for both sectors, as is time-stamping files to see by whom and when the data was last accessed. The ability to recover lost or damaged files can be a very useful resource for this sector too.

eDiscovery & Digital Forensics deal with these types of data:

Active Data – data that is regularly accessed, such as emails or files stored on local hard drives.

Cloud Data – the data that is collected and stored on cloud servers.

Mobile Data – more and more data is stored on our mobile devices. Our laptops, smartphones, and tablets hold vast amounts of sensitive data.

Offline Data – data that is not accessed regularly but still needs to be stored and preserved.

Back Up Data – system crashes don’t need to spell disaster, with regular backups, portable hard drives, and a disaster recovery system to restore lost data.

Hidden Data – data that has been deleted, or files that exist on numerous systems.

Having full control over who accesses and modifies data sets is imperative for eDiscovery and Digital Forensic experts. WinRAR’s built-in features, such as time-stamping, make it the perfect tool for controlling the last access times of important archives.

The back-up option and the Lock Archive feature prevent accidental modification or deletion of sensitive data files.

Setting passwords on archives with AES 256-bit encryption not only encrypts file names but all metadata too. This makes it impossible for the contents of files to be guessed at or intercepted. This is the ideal solution for those working in eDiscovery or Digital Forensics, assisting with maintaining the integrity of the data collected.

Complete control over data is maintained with WinRAR’s Administrator rights. The integrated password manager is a very useful addition, assisting users with keeping a log of the many passwords that are required to keep sensitive data secure.

WinRAR’s scan archive feature, when used in conjunction with existing anti-virus software, can scan files, preventing malicious content from being unpacked on to your machines/network. It is possible to restore damaged archives when enabling the Recovery Record.

Constant improvements made to WinRAR over the past 25 years have made it one of the most well-known and best loved compression applications on Windows. A knowledgeable and friendly Sales & Support Team has made WinRAR the leading software for those working in eDiscovery and Digital Forensics.