• No results found

Pre-Processing Navigation

In document Symantec ediscovery Platform (Page 133-138)

For information about pre-processing your data, refer to the following steps:

“Step 1: Enable Pre-Processing” on page 134

“Step 2: (Optional) Exclude Documents on the NIST List” on page 135 “Step 3: (Optional) Merge Custodians” on page 136

“Step 4: Analyze and Filter Sources” on page 137

“Step 5: Verify your Saved Processing Details” on page 144 “Step 6: Start Processing” on page 145

“Step 7: Review Processing Results” on page 145

Overview

Pre-processing your data can reduce cost by enabling you to target specific data within a source collection.

Note: Note: You must have a licensed, installed Pre-Processing module, and pre-processing enabled on your system at the time of case setup to use the following features.

The pre-processing module offers: • Pre-Processing Analytics

Visually summarize overall document set characteristics and present detailed analysis by custodian, timeline, and file type. This rapidly confirms that all case data has been collected and allows for accurate estimation of eDiscovery budgets and timelines.

Note: Pre-processing analytics are always available for loose files (with or without the module license). However, analytics for data in PST and NSF files are available only with the license and the case settings option for collect pre-processing analytics.

• Advanced Pre-Processing Filters

Enable users to interactively filter data by custodian, date, strong file type, and file size prior to processing. The product’s one-click filtering of custom file and "NIST list" items can significantly reduce downstream processing and review costs. This also enables pre- processing of LEF, and E01 files.

Step 1: Enable Pre-Processing

You must have licensed the Pre-Processing module in order to discover and process LEF files, and to get pre-processing analytics for PST and NSF files.

How to enable pre-processing

Enable the Pre-Processing module when you create a new case.

From the Settings page, select the Enabled advanced processing options configuration

Step 2: (Optional) Exclude Documents on the NIST List

Collected document sets often contain many files which are not user generated but are instead common application programs, help files, or DLLs. These files are identified and tracked by the National Software Reference Library and commonly known as the "NIST List." In addition, most companies have standard software images that they use for creating desktops, laptops, and servers, and often want to exclude those files from eDiscovery since they are not relevant. The product provides the ability for users to exclude both the standard NSRL (NIST list) files and to upload company-specific file hash lists into the system. Once the known file lists have been set up by the administrator, matching documents can be excluded with a single click while setting up a document source.

Note: Excluding documents on the NIST list occurs when you add a source.

How to exclude files on the NIST list from processing

1. From the Processing module, for the selected case, click Sources & Pre-Processing. 2. Select Add Case Folder Source and click Go.

The Add Case Folder Source page displays.

3. Select the Exclude Known Files (using NIST list) option.

Note: If you select to Include all file extensions, in the text field following your selection, you must specify which file extensions to include. Otherwise, no files will be processed. 4. Click Save.

Step 3: (Optional) Merge Custodians

When you have two or more same, or similar custodians (representing the same custodian) you can merge them into one unique custodian assignment. This is optional, and can be done either before or after processing your case data.

Note: If you process your case data first then merge custodians, you must rerun post- processing to update changes in custodian assignments in the case.

How to merge custodians

1. From the Processing module, for the selected case, click Custodians. Your list of custodians displays.

2. Select two or more custodians that you want to merge into the same custodian assignment.

3. Click Merge.

Note: The single custodian you select will automatically be associated with all documents and items previously associated with both. All other related custodians listed on the Merge page will be deleted.

4. Click Merge to confirm the single custodian assignment.

For further details about Custodian Merge (or to Un-merge custodians) refer to “Managing Case Sources and Custodians” on page 44.

Step 4: Analyze and Filter Sources

Analyzing and filtering sources is often an iterative process. You perform an initial analysis and then begin adjusting the filters and the set of sources that encapsulate the case data you need to process.

To access the Pre-Processing Interface

1. From the Processing module, for the selected case, click Sources & Pre-Processing.

2. Click the Pre-Processing Options tab.

Note: The Pre-Processing Options tab is only available if you have licensed Pre-Processing and have enabled it for the case during case creation. (This tab is not available when data in a case is currently processing.)

The Pre-processing interface, or Pre-Processing Options screen, displays.

Understanding the Pre-Processing Interface

Analyzing and filtering a collection source consists of the following tasks: 1. Selecting sources.

2. Choosing filters.

3. Analyzing how the filters impact the type and amount of data to process by manipulating the visualization options.

In document Symantec ediscovery Platform (Page 133-138)