Software / Cloud acquisition
eCloud Discovery
Collect email and cloud files, remove duplicate material and prepare the evidence for review. eCloud Discovery brings collection and processing into one workflow, helping your team reduce avoidable review work.
Platforms and licensing
Supported platforms
Browser-based workflow. Confirm the current supported browsers and any source-side utility or operating-system requirements during a walkthrough.
Licensing
Subscription. Contact for pricing.
Development and support
Developed, supported and owned by Global Digital Forensics.
The product
What eCloud Discovery does
Cloud evidence rarely lives in one account or one provider. A matter may involve email, account administration, file storage, collaboration tools and on-premises systems, each with different access, export and audit behavior.
eCloud Discovery brings those collection paths into one workflow. It supports authorized acquisition from email providers and business suites, file-sharing services and collaboration platforms. Collected material can be searched, filtered against NIST reference data, deduplicated and exported for review or direct import into eDiscovery tools.
Email and business suites
Collect from supported Gmail, AOL, Google Workspace and Microsoft 365 sources, including tenant-level and on-premises email workflows.
Files and cloud storage
Acquire authorized data and available logs from supported services such as Box, Dropbox and ShareFile.
Collaboration records
Collect supported Slack, Microsoft Teams, Zoom and related collaboration content with source context.
Search and culling
Search the collection, compare files against selected NIST NSRL reference sets, and document any exclusions and deduplication.
AI-assisted search
Use assisted search to identify likely relevant material in a large corpus, with human review controlling the final cull.
Review-ready export
Export natives, metadata and agreed load-file formats for delivery into supported eDiscovery platforms.
Methodology
Typical workflow
-
Connect
Authorize the supported accounts, tenants, repositories and collaboration sources included in the matter.
-
Collect
Acquire selected data and record source, scope, time, operator and available verification details.
-
Reduce
Search, compare selected known-software hashes and deduplicate the collection. Record the reference-set version and filtering decisions.
-
Export
Produce the agreed files, metadata and load files, then reconcile the delivery against the collection record.
Operating note
Compatibility and limits
Provider support, available data types, audit coverage and export options depend on the account, subscription, permissions and current provider APIs. These details are confirmed before collection.
Related software and services
Confirm the collection and export before connecting a tenant
Request a walkthrough using the provider, account type and data sources in your matter. Confirm the available build and access terms, then record supported record types, permissions, provider licensing and the export format for each source. A provider name alone does not establish support for every account or artifact.
- Source check: identify the tenant or account, authorized administrator, date range, retention settings and records the export can omit.
- Trial handoff: use a small authorized sample to check native files, message attachments, family relationships, identifiers, timestamps and receiving-platform field mapping.
- Reconciliation: retain requested and exported counts, filters, duplicate decisions, failed items and records excluded from the review set.
- Data handling: agree the hosting region, permitted users, model use, transfer controls, retention and deletion in writing before credentials or evidence are provided.
An illustrative export record can list one mailbox, its requested date range, delivered message and attachment counts, export errors and the receiving reviewer. Hashes check delivered files; they do not establish that the provider retained every requested record.
Talk with an examiner
Discuss this product for your engagement
Tell us the workflow and scale. We can discuss current availability, supported workflows and how it fits an examination or matter.
Since 1992 · 24/7 dispatch · Court-tested experts
Talk with an examiner
Discuss the matter and the next step.
Call to discuss timing, scope and the safest way to share information. Do not send evidence or credentials by email.
24/7 hotline: 1-800-868-8189