Educause Security Discussion mailing list archives

Re: E-Discovery of remote PST files


From: Nick Lewis <lewisnic () ACM ORG>
Date: Tue, 9 Dec 2008 07:39:36 -0500

You could try one of the sensitive information finders (SSN, CCs, etc) that
support PSTs, allow you to search for custom strings, and use the name as a
custom string?

Nick

----- Original Message -----
From: "Dave Koontz" <dkoontz () MBC EDU>
To: <SECURITY () LISTSERV EDUCAUSE EDU>
Sent: Monday, December 08, 2008 3:19 PM
Subject: [SECURITY] E-Discovery of remote PST files


All, our legal counsel are trying to comply with a legal request to turn
over all email communication campus wide regarding an individual over the
last couple years.  We do not archive messages, and the vast majority of
our
users pull their email via POP3 to Outlook where those messages are stored
on their local PC.

Are there any tools you can recommend to remotely scan users PST files for
specific messages, and hopefully pull those messages out, or foward them
off
to the administrator?

Obviously, we will have to come up with other methods for Mac users or
those
using different email clients, but the vast majority are Outlook users...
so
any help there would be greatly appreciated.  It will take forever to
visit
hundreds of PCs.



Current thread: