Educause Security Discussion mailing list archives

Re: E-Discovery of remote PST files


From: John Lerchey <lerchey () ANDREW CMU EDU>
Date: Mon, 8 Dec 2008 15:38:28 -0500

Hi Dave,

The easiest way that I've found to search PSTs is to have them loaded into outlook on a local drive and apply search 
terms provided by counsel.

I haven't seen any automated tools, other than "site solutions" that run on or in conjunction with the mail servers.

John


All, our legal counsel are trying to comply with a legal request to turn over
all email communication campus wide regarding an individual over the last
couple years.  We do not archive messages, and the vast majority of our users
pull their email via POP3 to Outlook where those messages are stored on their
local PC.

Are there any tools you can recommend to remotely scan users PST files for
specific messages, and hopefully pull those messages out, or foward them off
to the administrator?

Obviously, we will have to come up with other methods for Mac users or those
using different email clients, but the vast majority are Outlook users... so
any help there would be greatly appreciated.  It will take forever to visit
hundreds of PCs.




John K. Lerchey
Coordinator for Incident Response
Information Security Office
Carnegie Mellon University

Current thread: