Email Archive Program with Filter

[MichaelsComputerServices]

I have a client that needs to send digitally a bunch of emails to his lawyer for a case. I need software to scan through his outlook .pst, as well as the online mail server for emails- ranging from a specified date and specific email recipients. I've used MailStore, but this doesn't allow me to filter exactly what is needed. He doesn't want to send emails that aren't involving the legal case. Know of software that can do this?

 

[TurricanII]

How about a rule in Outlook to copy matching messages into a new PST? Rules can do date ranges and recipients.

Failing that, it is a bit longer winded, but you might import the PST into the excellent free mailpiler - http://www.mailpiler.org/wiki/start

This will index emails and let you search/export to EML files on criteria.

 

[MichaelsComputerServices]

The lawyer also needs to be able to easily access the emails, since his setup his unknown.

 

[TurricanII]

The lawyer also needs to be able to easily access the emails, since his setup his unknown.

Well, with rules you will end up with a PST file that you can send to them. With Mailpiler you end up with a bunch of individual EML mail files - one for each email and will contain the headers/attachments. EML can be opened by many programs.

Don't forget to 7Zip the sensitive data with a password and AES encryption before you post it, in case it gets lost. And of course don't include the password in the data pack/cd case - send by another means to the recipient.

 

[Markverhyden]

There are a number of PST viewers out there so that is not an issue. I'd be concerned about the discovery process. You customer should be making sure with the attorney it's OK for them to do this vs using a e-Discovery service.

 

[MichaelsComputerServices]

The lawyer has contracted me to do this and the customer happened to already be one of mine.

 

[TurricanII]

There are a number of PST viewers out there so that is not an issue. I'd be concerned about the discovery process. You customer should be making sure with the attorney it's OK for them to do this vs using a e-Discovery service.

Ah, of course don't forget this aspect that Mark points out...

If your client is relying on the contents of a computer as evidence then you need to look up things such as forensically sound bit level imaging of the disk with MD5 checksums and maintaining chain of custody - BEFORE you touch it! You need to be able to document how the data has been secured and not altered. I have a Tableau write blocker for these occasions so that I can acquire an image of USB media and hard drives using kit that is certified to block writing to the source media.

If you are not experienced then the reliability of the evidence could be compromised and could be a very bad outcome. Make sure you have insurance for legal claims against YOU or recommend a third party.