FD Logo
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Simple Facebook Preservation


November 2010

Welcome to Forensic Discoveries' eDiscovery and Digital Forensics Newsletter. Keeping you and your practice informed of the ever-changing realm and value of Electronic Discovery and Digital Forensics is the purpose of this newsletter. If you have a colleague that may be interested in subscribing, follow the instructions at the bottom of this newsletter to be added to the distribution. If you choose not to continue receiving this newsletter, follow the directions at the bottom of this newsletter and accept our apologies for intruding.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
in this issue
Early Christmas Present From Facebook
Forensic Discoveries Develops Standard eDiscovery Pricing
Judges' Guide to Cost-Effective E-Discovery
Reply All? Not for Legal Communications!
Amendments to Rule 26
Cyberspace Under Siege
Free eDiscovery Training Webinar
eDiscovery Case Law
 
Previous Newsletters

We hope you enjoyed our last newsletter "eDiscovery - Someone has to Say It". Due to a steady increase in new subscribers, Forensics Discoveries will continue to list previous newsletters. As others have done, please let us know of a specific topic you would like to see covered.

We have added a new newsletter archive section to our website. The improved archive interface provides the same interaction with the newsletter as the distributed newsletter. View the new newsletter archive here.

Below is a review of our previous newsletters:

August 2007 - "What is Computer Forensics?"

September 2007 - "Preparing Your Clients for EDiscovery - Part 1"
October 2007 - "Preparing Your Clients for EDiscovery - Part 2"
November 2007 - "Preparing for Your Clients' EDiscovery"
December 2007 - "Why Does My Case Need Electronic Discovery?"
February 2008 - "Computer Forensics Proves Intelletual Property Theft"
March 2008 - "In Search of the Holy Grail"
May 2008 - "When to Preserve"
June 2008 - "Electronic Discovery in Workplace Litigation"
July 2008 -
"Proving Spoliation with Computer Forensics"
August 2008 - "Proposed Updated TN Rules of Civil Procedure"
September 2008 - "Proposed TN Rules of Civil Procedure Rules 16.01 and 26.02" 
October 2008 -
"TN Civil Rule 26.02 - Two-Tiered Discovery"
November 2008 - TN Civil Rule 26.02(5) - The "Clawback"
December 2008 - Forensic Discoveries joins Sword & Shield Enterprise Security Inc.
January 2009 - "What is Metadata?"
February 2009 - TN Rule 37.06 - The "Safe Harbor Rule"
April 2009 - eDiscovery Everywhere!
May 2009 - Exciting TBA eDiscovery Seminar
June 2009 - "
Two Weeks Until the New Rules"
July 2009 -
"Employment Litigation"
October 2009 - "Scrubbing Metadata"
November 2009 - "When ESI isn't There"
January 2010 - "E-Discovery Update"
February 2010 - "Computer Forensics in Employment Defense"
June 2010 - "A Shift in eDiscovery"
July 2010 - "Social Networks"
September 2010- "eDiscovery - Someone Has To Say It"
October 2010 - "eDiscovery or Forensics?"

For frequent news updates, follow me on Twitter by clicking on the below icon
Follow me on Twitter


                                Early Christmas Present From Facebook
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

  Just in time for the holiday season, Facebook as a free gift that attorneys will love. Facebook has recently enabled a new feature providing a very easy way to collect and preserve profiles.

In the past, preserving and collecting user profiles on Facebook was a daunting task of screenshots, printing pages, and downloading potentially hundreds of individual files and photos. A Facebook profile can now be obtained for review using the simple procedure outlined at the end of this post.


Time will tell why Facebook decided to implement this feature. Facebook may have become weary of responding to an avalanche of subpoenas and preservation letters. Perhaps they just haven't found a way to charge for responding to legal requests as Google has. Regardless of the intent, this feature will greatly assist in gathering Facebook profiles in litigation.


What Facebook Information is Downloaded?

    * Profile page with all of the user's information.

    * The users's "Wall" with all status updates.

    * Replies/comments to all user contents, including status updates and photos.

    * A complete list of Facebook friends.

    * Notes.

    * Events to which the person RSVP'd.

    * A listing of all photos with the time of the upload

    * A complete list of the elusive Facebook messages (email) with the entire              conversation thread with timestamps.


With the great advantages this feature provides, I feel compelled to disclose issues that this beneficial feature will not address.


    * For starters, you will either need to have the Facebook username and password or rely on the other party to perform this procedure and provide the file to you. In other words, full cooperation or an appropriate subpoena or order will be needed.


    * If you are dealing with one of those pesky people that may decide to do a little "house cleaning" before the process is started, you will not have this deleted information (if you don't tell them, neither will I).


    * The information does not include the Holy Grail of instant messaging conversations, but these are often recoverable with a computer forensic analysis of the person's hard drive.


    * Lastly, this procedure will only gather information from the designated user's profile. It will not reveal posts to the walls of other Facebook users.


Since Christmas is fast approaching, I would like to ask Facebook to add the simple feature of mapping a Facebook user to the groups they have joined and the pages they have "liked" and any Facebook instant messages that are available.


How To Download The Facebook Information


1. On the upper right hand side of the Facebook page, choose Account-Account Settings.

2. You will be presented with the "My Account" page.

3. Toward the bottom of the page, you will see the "Download Your Information" option.

4. After choosing this option, Facebook will notify you that they will send a download link when the process is complete. Be patient, it could take a while.

5. Once the process is complete, you will receive an email from Facebook with the subject "Your Download Is Ready".

6. After clicking on the embedded link in the email, you will be presented with a password authentication screen.

7. Upon entering the correct password for the account, you will be provided with the "Download Now" Button.

8. Choose the appropriate place to save the file to your computer's hard drive.

9. Treat this information the same way that you would any other document of potential relevance by making multiple copies (preserving) and placing the copies with the appropriate information in a safe place.

10. Once you have backup copies properly preserved, unzip the file using your favorite application to handle zip files (WinZip, 7zip, WinRAR, Windows extractor, etc.).

11. There will now be a folder named with random numbers.

12. Double-click the folder from the previous step, then doubleclick the index.html file. You now have an offline Web page that has the Facebook information for that profile.


Other Resources

Facebook's FAQ for Download Your Information

Video Showing How to Download Facebook Information



Forensic Discoveries Develops Standard eDiscovery Pricing

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Last month's feature article "eDiscovery - Someone Has To Say It" really resignated with many of you and I appreciate the feedback. One of my favorite replies read "What are you doing to simplify the pricing and lower the costs of eDiscovery?" Since that time, we have been working to develop a competitive pricing model that not only handles the processing phase, but all technical aspects of the EDRM lifecycle. The new pricing model provides the many advantages over the conventional and complex pricing models that are based on processing alone.
  • Standard, predictable pricing for all technical phases of the eDiscovery lifecycle.
  • Standard pricing that covers one year of document hosting.
  • Pricing is up to 75% less than other eDiscovery vendors.
  • All technical aspects of the project are managed by eDiscovery experts acting as liaison between legal and technical teams.
  • Our technology is provided on a SaaS (Software as a Service) model protecting our clients from expensive technology infrastructure costs.
  • Documents may be accessed, reviewed, and analyzed using any computer, even Apple iPads, from any location in a secure manner without installing additional software.
  • Complete technical training is provided at no additional cost.
The goal of the new pricing model is to address the major issues facing today's eDiscovery industry; uncontrollable costs and communication challenges between legal and technical team .

Contact us for more details or a demonstration of our unified eDiscovery platform.


"Judges' Guide to Cost-Effective E-Discovery."
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
The eDiscovery Institute, a 501(c)(3) nonprofit research organization, has just released the "Judges' Guide to Cost-Effective E-Discovery." The Guide details various processes and technologies that reduce the cost of processing ESI. The Guide features a foreword by Hon. James C. Francis IV, Magistrate Judge for the Southern District of New York.
 

The Guide will be distributed in print form to all Magistrate Judges in U.S. District Courts.

Electronic copies of the Guide are available here

 

Reply All? Not for Legal Communications!

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

These days, email between lawyers and their clients is standard; in fact, it's often the preferred medium of communication. It's fast. It's easy. It helps keep things organized. It can be done in a bathrobe. And it saves money.


Oh, and it can also lose the case. And that's almost what happened in Charm v. Kohn, 2010 WL 3816716 (Mass. Super. Sept. 30, 2010).

 
Read the article here

Amendments to Rule 26

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

On December 1, there will be additional changes to the Federal Rules of Civil Procedure. Specifically, Rule 26 will be amendments. Notable are the changes in Rule 26 regarding trial preperation materials, including expert's communications with attorney (limited discoverability) and drafts (no longer discoverable). 

Download the amended rules here

Cyberspace Under Siege

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Law firms are likely targets for attacks seeking to steal information off computer systems

Andy V. Sabett remembers some years ago when a law firm installed glass-breakage sensors on the windows of its 43rd-floor conference room, where documents often were compiled for big cases. The firm wanted to guard against the possibility that someone would rappel from the skyscraper's observation deck and break through the windows to steal sensitive information.

That kind of security plan might have been sufficient back in the days of Sean Connery's James Bond, but it's hardly adequate to protect against the security threats hanging over law firms today.


Read the entire article here

Free eDiscovery Training Webinar

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

It has been my experience that there are many misconceptions of the complexities of eDiscovery. When properly leveraged, eDiscovery should provide efficiencies rather than frustrations. With this in mind, Forensic Discoveries is now offering Free eDiscovery Webinars for you and your firm from the convenience of your office. The material is similar to that which I have presented for CLE credit to both state and local BAR associations both solo and with eDiscovery attorneys and Federal Judges. The presentation addresses the following topics:
  • eDiscovery Lifecycle (EDRM)
  • Technical Interpretations of the Updated Federal Rules of Civil Procedure
  • Digital Forensics Basics
  • eDiscovery Challenges

If you are new to eDiscovery, this one hour presentation will provide the foundational knowledge to succeed with eDiscovery. If you are experienced in eDiscovery, this can provide an opportunity to ask specific technical questions about the process.

We are also working on publishing a 15 minute video for introducing the importance of eDiscovery that you can share with your clients. More details soon to follow.

Depending on the location, we may be able to work with you to provide CLE credit for the webinar. A listing of our previous speaking engagements and papers written can be found here. Reply to this email or contact me directly at 865-244-3505 to schedule.
~

eDiscovery Case Law
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Court Imposes Adverse Inference for Failure to Preserve Text Messages Related to Criminal Investigation

United States v. Suarez, 2010 WL 4226524 (D.N.J. Oct. 21, 2010)

For the Government's failure to preserve text messages sent between investigating agents and a cooperating witness, the court found sanctions were warranted and ordered that the jury would received a "spoliation charge" allowing (but not requiring) it to infer that the deleted messages were favorable to the defendants.

Read more here


Magistrate Judge Offers to "Friend" Witnesses on Facebook for In Camera Review of Evidence 


Barnes v. CUS Nashville, LLC, 2010 WL 2265668 (M.D. Tenn. June 3, 2010)


In this slip and fall tort action, the defendant moved to compel ESI and for a trial continuance to resolve the protracted arguments between parties regarding the plaintiff's and witnesses' Facebook photos and e-mails. The magistrate judge found that the defendant's mishandling of a Facebook subpoena caused a major delay in discovery, while also noting that "[c]ooperation on the part of both parties could have prevented this delay." To resolve this discovery issue expeditiously, the magistrate judge stated he was willing to create a Facebook account. If the witnesses would accept the judge as a Facebook "friend" "for the sole purpose of reviewing photographs and related comments in camera," he would "promptly review and disseminate any relevant information to the parties" and then close the account. Additionally, the judge reviewed submitted materials from the plaintiff's Facebook account and deemed one message, seven pictures and the accompanying metadata relevant to the case. Ultimately, the judge granted the continuance but denied the motion to compel ESI for lack of jurisdiction.



Court Imposes Monetary Sanctions for "Willful Dereliction" of Discovery Obligations 


Nycomed U.S. Inc., v. Glenmark Generics LTD., 2010 WL 3173785 (E.D.N.Y. Aug. 11, 2010)

 

In this pharmaceuticals patent litigation, the plaintiff moved to strike portions of the defendants' pleadings due to its unjustified withholding of relevant evidence and willful failure to search two important and obvious repositories for responsive ESI. The defendants argued its withholding was justified because the documents had already been produced by a third party, and claimed the ESI repositories had been simply "overlooked." Rejecting the defendants' excuses, the court determined that the underinclusive nature of the defendants' discovery efforts and searches was willful - not an inadvertent omission. Based on the defendants' "willful dereliction of its discovery duties" and its status as a "substantial multinational corporation," the court found that monetary sanctions in the amount of $100,000 to the plaintiff and $25,000 to the court clerk were justifiable. The court denied more severe sanctions based on the level of prejudice suffered by the plaintiff and declined to award attorneys' fees noting the "resolution of these matters is long overdue."



~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Our Website
 
Forensic Discoveries is available to provide onsite presentations or Q&A sessions on topics such as Electronic Discovery, Technical Implications of the updated Federal Rules of Civil Procedure, or Computer Forensics. Forensic Discoveries is also available to you, obligation free, to answer any specific questions pertaining to these topics. Simply give us a call and we will be glad to answer any questions pertaining to Electronic Discovery and Digital Forensics.


a division of Sword & Shield

   Knoxville Office

   Phone:    (865)-244-3500

                 (800)-810-1885

   Address:  1431 Centerpoint Blvd, Suite 150

                  Knoxville, TN 37932


   Washington D.C. Office

   Phone:    (410)-414-5580

   Address:  1425 K Street NW, Suite 350

                 Washington, DC 20005-3514


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

If you have a topic that you would like addressed in the newsletter, please let us know. Either visit http://www.forensicdiscoveries.com/newsletter.html and submit your suggestion there or reply to this e-mail with your suggestion. 

For previous versions of Forensic Discoveries EDiscovery newsletters, click here 

This document does not provide legal or other professional advice and should not be relied upon as anything other than a starting point for research and information on the subject of electronic evidence and digital forensics.