Electronic Discovery and Computer Forensics

Electronic Discovery (E-Discovery or eDiscovery) and Computer Forensics are easy to confuse, but very important to understand.

When preparing for litigation, Electronic Discovery is the process of identifying discoverable electronically stored information (ESI), processing the information (such as de-duplication and filtering) reviewing and analyzing the information, and then presenting the information in a format to be used for trial, depositions, etc. For more information regarding the areas that encompass the eDiscovery process, see the EDRM (edrm.net).

Computer Forensics is the process of finding and in many cases restoring or decrypting information that is crucial to a civil or criminal from hard drives, servers, networks or mobile devices.