A schematic posted here on docs.microsoft.com does an excellent job of showing how Microsoft 365 can be used at each stage of the EDRM.

Legal hold notifications are distributed to custodians, and their activity is audited.

Data from multiple locations can be transferred to a central repository for review.

The Advanced eDiscovery tools which come with Microsoft 365 facilitate the preservation of data with the goal of retaining it for processing and review in legal matters.

34 views0 comments

You can run a simple PowerShell script to get the file size of files saved in various locations on a network.

Get-Childitem -file "C:\foofolder\2022.05.31 Fedex Ground.pdf" | select length

Get-Childitem -file "C:\foofolder\Citation\test\XYZ 000400.pdf" | select length

Get-Childitem -file "U:\O'Shea Documents\personal\port st. lucie.heic" | select length

Simply enter the file path in one column of an Excel spreadsheet, with the Get-Childitem -file command in the column to the left, and the | select length operator in the column to the right. Copy the three columns to NotePad and remove the tabs. Enter the script in Windows PowerShell ISE:

It will output the number of bytes in each file. [1924588 equals 1.9 MB]. You can copy the file sizes back into the Excel spreadsheet so they line up with file paths:

Recently, I used this script to get the length of hundreds of Excel files linked to on a spreadsheet for a trial exhibit list that were saved in dozens of different directories, when requested to find if a file was saved on the list under a different Bates number. The closest in size file proved to be a match.

20 views0 comments

If you want to find out if a drive on a device running Windows has any bad sectors that you will not be able to copy files from, or copy files to, you can run the chkdsk command. chkdsk will locate bad sectors, and can also be used to fix errors in the file system. If you enter: chkdsk /r in Command Prompt, the system will locate bad sectors, and try to recover data from them.

chkdsk will generate a list of how many files are on a drive, and how many sectors are bad.

If you search in Windows for 'Event Viewer', and open it, in the Windows Logs folder you'll see the application log. Searching for 'chkdsk' in this log will find the results of any past chkdsk reviews run on the system.

Right click on the entries in the Application pane in which this search finds hits, and you'll be able to copy out the information to NotePad.

13 views0 comments

Sean O'Shea has more than 15 years of experience in the litigation support field with major law firms in New York and San Francisco.   He is an ACEDS Certified eDiscovery Specialist and a Relativity Certified Administrator.

The views expressed in this blog are those of the owner and do not reflect the views or opinions of the owner’s employer.


All content provided on this blog is for informational purposes only. The owner of this blog makes no representations as to the accuracy or completeness of any information on this site or found by following any link on this site. The owner will not be liable for any errors or omissions in this information nor for the availability of this information. The owner will not be liable for any losses, injuries, or damages from the display or use of this information.


This policy is subject to change at any time.