Copyright © 2017 ALM Media Properties, LLC. All Rights Reserved.
The phrase “forensic collection” often is associated in our minds with a bit-by-bit copy of a computer’s entire hard drive. This may be crucial in cases where we might expect authentication issues or where investigation of slack and fragmented space may be important. Criminal cases are a prime example. But a collection of electronically stored information (ESI) may be limited to only certain files that are likely to be relevant and still be forensically sound.