Category Archives: Uncategorized

SEARCH REVEALS HUNDREDS OF IMPROPER JUROR SOCIAL MEDIA POSTS PER DAY (PART 2)

In response to our post two weeks ago identifying widespread social media abuse by jurors that could quite possibly lead to mistrials, a frightened prosecutor and others have inquired about how exactly juror’s social media data should be collected and what the various techniques are. So this follow-up post discusses the mechanics of proactively monitoring jurors that are both empaneled and potential members of your pool.

First and foremost, it is important to understand what not to do. Do not fire up Twitter.com and start following jurors. They will receive a notice that they’re being followed, which is improper under various legal ethics rules. Also, it is not effective technically, as you cannot access or search past tweets very effectively (which are often just as important as ones in real time), and it is very difficult to monitor up to several dozen jurors in your pool.

The right software will allow you to employ several techniques and methods, which are most effective when used in conjunction to comprehensively and ethically search for all publicly available juror social media.

The first method is to set a geo-fence around the courthouse and immediate area. This will collect tweets and Instagram posts in real time, as well as going back several days if needed, to collect any tweet that is geo-located in that area. Here is an example of such an effort:geo fence

Another advantage of this method is that it will capture any geo-located social media posts by not only jurors at the courthouse but also by opposing counsel or witnesses, which happens more often than you would think. Expert witnesses in particular can be prolific on social media as they promote their services and their personal brand. They also often Tweet and share approvingly links to industry articles and blog articles, which can then be considered to be part of their opinion record.

The second method is to set keywords such as #juryduty or “jury duty” across the public feed of social media sites. This will cast a wider net, returning posts from all over the country if not the world. But with the right tools you can quickly be able to filter out the ones that are within your geographical location. This will also capture posts that are not Geotagged by the user.  If your case has any media attention, even just locally or within industry media verticals, it is a very good idea to set up keywords that can identify any mention of your case in public feeds.

And just for fun, here are the top 5 controversial juror posts from just the past few days:

bad tweets

And finally, once you have identified an impaneled juror or a member of the potential pool, and have their social media profile names,  you can quickly and anonymously collect all their past and ongoing public social media content through special software such as X1 Social Discovery. This also has the advantage of instantaneous and unified search across all available social media streams from multiple jurors. You also can set up email alerts so that if a juror or other person of interest posts anything, you will immediately be alerted to that post. This is also an effective technique when following opposing counsel or key witnesses. And it’s often a good idea to your monitor your own clients as well.

For more information about how to conduct effective social medial investigations, please contact us, or request a free demo version of X1 Social Discovery.

1 Comment

Filed under Best Practices, Case Study, Legal Ethics & Social Media, Social Media Investigations, Uncategorized

Print Screen for Social Media Evidence: Not Defensible and Also Very Expensive

As we often note on this blog, courts continue to routinely find that the testimony of an individual who merely printed a copy of a social media webpage is insufficient to authenticate social media evidence. Notable recent cases with such rulings include Linscheid v. Natus Medical Inc., 2015 WL 1470122, at *5-6 (N.D. Ga. Mar. 30, 2015) (finding LinkedIn profile page not authenticated by declaration from individual who printed the page from the Internet); Monet v. Bank of America, N.A., 2015 WL 1775219, at *8 (Cal Ct. App. Apr. 16, 2015) (memorandum by an unnamed person about representations others made on Facebook is at least double hearsay” and not authenticated), and Moroccanoil vs. Marc Anthony Cosmetics, 57 F.Supp.3d 1203 (2014) (Facebook screenshots inadmissible in a trademark infringement without supporting circumstantial information).

These rulings underscore why best practice technology is essential for gathering social media and other Internet evidence. But while many practitioners understand this in terms of defensibility, many operate under the mistaken assumption that manual print screen efforts are a cost-saving shortcut. Nothing could be further from the truth. Stallings v. City of Johnston, 2014 WL 2061669 (S.D. Ill. May 19, 2014), is very instructive as it clearly illustrates that printing Facebook pages for production in eDiscovery is a really bad (and expensive) idea.  In this case, plaintiff Jayne Stallings brought suit for wrongful employment termination against the City of Johnston, her former employer. And it seems that Stallings, like millions of others, was an avid and highly opinionated Facebook poster.

So to respond to discovery requests, Plaintiff’s counsel and a paralegal spent a full week printing out the contents of Plaintiff’s Facebook account — which amounted to over 500 printed screen captures — manually rearranging them, and then redacting the pages. Plaintiff counsel also claimed that she could not provide the relevant Facebook information on a disk, and thus resorted to inefficient paper production – an obviously costly exercise. A week of paralegal and lawyer time could easily run $25,000 and no client should pay anywhere near that amount for a task that, with the right technology, requires minutes instead of days to perform.

Print screen as a social media evidence collection method only leads to higher costs for many reasons, namely because the resulting output is a truncated, unsearchable, flat image that fails to retain the all-important metadata. As a result, a substantial amount of secondary processing must be done to upload the social media images into a standard attorney review platform. The images must be run through OCR, the various requisite metadata fields must be manually entered, and the truncated screen shots reassembled into context so they appear and read as they did in their original state. All this will typically cost thousands of dollars in additional processing fees.

Additionally, when an examiner merely relies on print screen, the scope and thoroughness of the collected social media and Internet evidence is severely limited. This often results in key evidence being overlooked as well as impacting its evidentiary integrity. Employing more automated means, such as X1 Social Discovery, enables the examiner to quickly collect entire web pages and publically available social media accounts, which can be hundreds of pages long. This comprehensive and thorough collection allows the examiner to collect far more potential evidence, preserving all relevant metadata, and having that evidence be immediately searchable and reviewable in a highly effective integrated review platform.

Further, the examiner can build a much stronger case for authentication by constructing timelines, drawing connections between witnesses and their various posts, collecting more corroborating metadata, and a litany of other information to build a compelling circumstantial case to authenticate the social media or web page evidence in question.

And of course another key benefit of X1 Social Discovery is its ability to preserve and display all the available “circumstantial indicia” or “additional confirming circumstances,” in order to present the best case possible for the authenticity of collected social media evidence. This includes collecting all available metadata and generating a MD5 checksum or “hash value” of the preserved data, for verification of the integrity of the evidence.

It is important to collect and preserve social media posts and general web pages in a thorough manner with best-practices technology specifically designed for litigation purposes.  For instance, there are over twenty unique metadata fields associated with individual Facebook posts and messages. Any one of those entries, or a combination of them contrasted with other entries, can provide unique circumstantial evidence that can establish foundational proof of authorship.

So while it can seem counterintuitive as sometimes there is a tradeoff when it comes to legal technology between best practices and costs, manual print screen efforts for social media are not only very costly, they subject clients to evidentiary challenges that could place an entire case in peril. But you can have the best of all worlds with the scalability, cost-saving and defensibility brought by X1 Social Discovery.

Leave a comment

Filed under Uncategorized

VMworld Recap: Major Disruption in Store for Enterprise Search & eDiscovery

by John Patzakis

VMworld

Last week we attended and exhibited at VMworld 2014 in San Francisco, VMware’s annual conference that brings together over 25,000 thought leaders, subject matter experts, technology providers and IT professionals to immerse themselves in the latest in virtualization and cloud technology. VMworld is now essentially the modern-day COMDEX, spread out among the sprawling Moscone Center. The difference is that VMworld’s exclusive focus is the enterprise, and more specifically the modern and trending IT enterprise. VMworld is where the forward thinking enterprise CIOs are now, and where everyone else will be in the next 2-4 years.

In the opening keynote, VMware CEO Pat Gelsinger — who recently explained to the Wall Street Journal that “we are in the period of the greatest tectonic shift in the IT industry in the last 30 years” — emphasized the trend of “frictionless IT” running the enterprise where “everything is virtualized” utilizing a hybrid mix of on-premise virtualization, public and private cloud.  Frictionless IT involves a model where pools of virtual machines — comprising virtual desktops and servers running in either the public cloud or a private cloud — are managed by IT administrators enterprise-wide from a single console, without physically touching any hardware. This allows for virtual desktops, servers and supporting applications and software upgrades to be rolled out and managed on a highly automated basis, including having resources moved from private to public clouds and back again, all with a few mouse clicks.

So given the importance of this conference to the present and future of enterprise IT, it was highly notable that X1 was the only enterprise search provider present among more than 400 exhibitors. It is actually surprising that no other search vendors were here given how quickly attendees ‘got it.’  They understood that search is the elephant in the room for VDI and other enterprise-stored data and quickly responded positively to X1’s message. The reason for our competitors’ absence, in my opinion, is that nearly all the current enterprise search software vendors, as well as eDiscovery tools, represent legacy technology that does not support deployment into highly virtualized environments. Traditional enterprise search solutions are limited to either appliances or arduous manual on-site installations, neither of which can operate in true virtual environments. In other words, they represent a very high degree of friction, with entrenched architectures that must be completely re-written in order to support virtualization and the new frictionless IT paradigm.

And the thing about truly supporting cloud and on-premise virtualization is that enterprise software vendors cannot fake it with enterprise CIOs and their staff. For instance, there is a high degree of “cloud-washing” in eDiscovery, where vendors host their own attorney review systems on a SaaS basis, and thereby claim they are cloud innovators. And while there is a legitimate but limited use case there, a complete process baked into the enterprise and its information management DNA needs to encompass integrated preservation, collection and early data assessment — including first pass review. Such an eDiscovery system must be on premise and will not survive unless it truly operates in a virtualized environment, whether in the public or private cloud.

Solutions that truly support virtualization are VMware-ready certified, and can also be quickly and remotely installed into the public cloud through a readily available machine image, such as an Amazon Machine Image (AMI) for the Amazon Web Services cloud. In essence, major enterprise software now has to effectively install almost as easily as a mobile phone app.

As an aside, another notable observation that I believe is highly indicative of this “tectonic shift” was the near complete absence of the major systems integrators, with the exception of Capgemini. Most of the other top 10 SIs were completely absent and the few others there had a very minimal presence. This is, again in my opinion, because most of these systems integrators thrive on a “friction” model (think nine-month enterprise software installation), and are struggling to adapt to the new world order.

In our recent discussions with folks at Amazon Web Services, they recounted amusing stories of companies asking to send hardware appliances or teams of expensive consultants to AWS data centers to index and manage their data for enterprise search and eDiscovery purposes. Both scenarios are non-starters for public cloud architectures. This is where X1 is leading the charge for both enterprise search and eDiscovery.

We are very excited about our partnership with VMware, and the hundreds of contacts and new and existing customers we connected with at the show. And more exciting things are to come. Stay tuned for exciting announcements in the coming months. In the meantime, I recommend you start making plans for VMworld next year.

Leave a comment

Filed under Uncategorized

VMworld 2014 Hot Topics – VDI, Hybrid Cloud & Mobility

VMworldNext week, the VMworld conference kicks off and all of us at X1 are excited.  VMworld gives X1 the opportunity to introduce our newly-minted VMware Ready products – X1 Search 8, X1 Search 8 Virtual Edition, and X1 Rapid Discovery – to VMware users.  Perhaps more importantly, though, the conference is an opportunity to hear where the world is moving with regard to several hot topic areas:  VDI; hybrid cloud; and mobility.

Desktop virtualization promises many benefits: lower IT costs; streamlined administration of IT assets; and end-user flexibility in terms of accessing the desktop from anywhere.  Given the popularity of BYOD, the consumerization of IT, and the need for mobility to support telecommuting, VDI is becoming more and more important.  There look to be some compelling sessions at the show about customer successes using VDI that will show not only that the benefits of VDI are real, but also how others can learn from those successes to continue to drive VDI adoption.  At our booth, X1 will continue to remind folks building unified search into VDI requirements early on can optimize VDI deployments.  At the very least, this will help to ensure that end-users are more receptive to the virtual desktop and allow them to remain productive.  Getting end-users to buy in is often half the battle when deploying new technology.  When it comes to VDI environments, a good search solution must decouple the search UI from the indexing service.  Otherwise, indexing will require virtual desktop computing resources and cut into VDI cost savings.  The goal is to minimize the RAM usage and search client footprint on the virtual desktop.

Hybrid cloud is a combination of a private IT infrastructure and a public cloud.  The public and private cloud infrastructures then communicate over an encrypted connection and can port data and applications back and forth.  Hybrid cloud is hot because it delivers real benefits:  increased speed of access time and reduced latency because of an on-premise, private infrastructure that is accessible directly as opposed to through the internet; more flexibility to have on-premises infrastructure that can support the average workload and to leverage the public cloud when the workload exceeds the power of the private cloud component; and more flexibility in server designs that can lower the costs of storage.  X1 will detail to booth visitors how unified search of information no matter where it lives – cloud, on-premise, hybrid – can make hybrid cloud environments more user-friendly.  Products like X1 Rapid Discovery enable hybrid search that lets IT glean all the benefits of hybrid cloud while ensuring end-users are happy with their ability to find information.

Mobility is an important topic and complementary to both VDI and hybrid cloud.  VDI and hybrid cloud environments will enable business professionals to be mobile and productive.  One of the keys to productivity is fast, easy access to information – and that is exactly what X1 provides.  The architecture for X1 Search 8 Virtual Edition stands to enable better access to information on more and more devices.  We are excited for VMworld because it means the opportunity to meet further with the VMware Airwatch team and understand how X1 can continue to partner with VMware in new and innovative ways.

If you are going to be at VMworld, please come see X1 at Booth #2436.  We would be happy to show you our products and how they can complement existing or planned VMware investments.

Leave a comment

Filed under Corporations, Desktop Search, Enterprise Search, Hybrid Search, Uncategorized

Social Discovery: An Interview With Howard Williamson

This week’s blog is something new for X1 – a Q & A with Howard Williamson, the General Manager for X1’s market leading Social Discovery product.  Howard is an experienced digital forensics expert and began his career in law enforcement, which gives him a unique perspective on the practice of social discovery.  I had the pleasure of interviewing Howard this week on what is a very hot topic – social discovery.

Why Social Discovery?

Howard:  I remember back in the mid-1990’s there was a real feeling of excitement around digital forensics.  It was the cutting edge of the forensics field and the work was really fun.  Social media is now what digital forensics was in the mid to late 1990s – it’s the cutting edge of where investigation and intelligence is right now.  The work is fun because there are lots of challenges; the fun part is taking the practice from good to great.  That is what attracted me to the opportunity at X1 – because X1 Social Discovery can make the practice great because the product addresses the challenges of defensibly collecting a high volume, diverse data set like social media.

How does the law enforcement background complement this role?

Howard:  Ultimately, the goal of social discovery is to collect data in a manner that allows it to be used in criminal or civil litigation.  Knowing how that process works is critical.  The law enforcement background gives that experience of defensible collection across many different types of digital evidence.  And, on the criminal side of things, the standards of defensibility are quite high, so carrying that over to the civil side means that X1 will always meet high authenticity standards.  I bring that high bar from the digital forensics world to this brave new world of social media.

What’s new about this practice?
Howard:  The nice thing about now versus the mid-1990s is that we are now using purpose-built tools like X1 Social Discovery rather than co-opting system administration and network tools like we did in the early days of computer forensics.  That makes the Modern evidenceprocess more efficient and more complete.
Rather than using a sledgehammer to put a nail in, we are using a hammer.  The tool is built specifically for social discovery and therefore makes the practice more efficient.  Whereas in the early days of digital forensics, collection procedures where often made up on the fly, with Social Discovery, the approach is much more structured and systematic.  At X1, with our experience, we are certainly able to think and react on the fly to new challenges, but with a purpose-built tool, we can do so much more efficiently.  And, in the eDiscovery world, efficiency and defensibility are two very important things.

Are you seeing social discovery specialists pop up? 

Howard:  What we are seeing is that digital forensics professionals and intelligence professionals are implementing social discovery into their processes and procedures.  There are not “specialists” in social media; rather, the social discovery tool allows more people to collect this type of data as part of a broader job.  They are also doing things like mobile forensics and other digital forensics.  Thus, X1 Social Discovery has become an important tool in their toolkit.  The tool actually makes it easier to bring social media content into the collection because the professional doesn’t have to dive deep into things like mobile operating systems.  It becomes easier to be an expert in social collection because the product makes it simple to collect and analyze.

Do you think that Social discovery is a mainstream practice now?

Howard:  It absolutely is.  The evidence of that is our business.  X1 has nearly 500 paid install sites and nearly 4,000 end users conducting social discovery.  These users got ahead of the curve and have social media integrated into their processes.  The growth opportunity is still huge because it is inevitable that case law will force everyone to take social media more seriously, in the way that the Enron case put a spotlight on electronic discovery in general.  Law enforcement got the importance of social media evidence early on.  Even though a more typically cautious industry, police departments see that social media is a critical form of evidence and have built it into collection processes.  This is how most areas of forensics have evolved.   There is an attitude that, if it’s good enough for criminal law, it’s good enough for civil court.  That is part of what’s exciting for X1 – we have a great base of law enforcement customers putting the product through the paces.  X1 Social Discovery is truly battle-tested and no other solution works quite as well.  We are nicely positioned as the social discovery leader in a mainstream market with high growth potential.

What should we look for in the next year of social discovery?

Howard:  I would expect to see the big social networks continue to gain traction.  I don’t foresee a new behemoth social network to challenge the popularity of Facebook and Twitter.  From an app perspective, self-destructing messaging looks to remain popular as privacy becomes more of a concern.  Forensics will play a large role in determining whether those messages are truly destroyed or actually discoverable.

X1 will continue to build out connectors to more and more social networks and improve reporting and deliverables.  There will be more ability to analyze the data within the investigation platform.   What X1 wants to enable is people to do their jobs within a given workflow.  Some users will want to collect and review social media directly within X1, and the tools enables them to do that.  Others have examiners collect the data, but then move to a review tool where litigators can look at it.

Big thanks to Howard Williamson for sharing his time with us.  If you have questions about social discovery, please contact us at info@x1.com for more information.

_________________________________________

Catch Howard’s lecture at HTCIA’s Annual Conference, Tuesday, August 26, where he will cover Social Media Collection and Review >

 

 

 

 

 

 

 

 

 

 

Leave a comment

Filed under Best Practices, Social Media Investigations, Uncategorized