Embracing Differences? Interplay of Digital Forensics in eDiscovery

As we continue to embrace technology in our daily life and work, it is highly likely that digital forensic experts and their forensic reports will become increasingly important to litigation. Legal case evidence in the form of digital artifacts in the modern age sometimes necessitates digital forensics as such evidence is not readily accessible for use in legal arguments.

en flag
nl flag
et flag
fi flag
fr flag
de flag
he flag
ja flag
lv flag
pl flag
pt flag
ru flag
es flag

Content Assessment: Embracing Differences? Interplay of Digital Forensics in eDiscovery

Information - 95%
Insight - 90%
Relevance - 95%
Objectivity - 95%
Authority - 90%



A short percentage-based assessment of the qualitative benefit of the post highlighting recent research on the interplay of digital forensics in eDiscovery.

Editor’s Note: From time to time, ComplexDiscovery highlights publicly available or privately purchasable announcements, content updates, and research from cyber, data, and legal discovery providers, research organizations, and ComplexDiscovery community members. While ComplexDiscovery regularly highlights this information, it does not assume any responsibility for content assertions.

To submit recommendations for consideration and inclusion in ComplexDiscovery’s cyber, data, and legal discovery-centric service, product, or research announcements, contact us today.

Industry Report by Sundar Krishnan and Narasimha Shashidhar

Interplay of Digital Forensics in eDiscovery

Shared with permission from authors Sundar Krishnan and Narasimha Shashidhar, the following paper explores the relationship between the disciplines of digital forensics and eDiscovery and highlights key areas of interest ranging from digital forensics skills to forensic opportunities relative to the eDiscovery industry.


Digital forensics is often confused with eDiscovery (electronic discovery). However, both the fields are highly independent of the other but slightly overlap to assist each other in a symbiotic relationship. With decreasing costs of cloud storage, growing Internet speeds, and growing capacity of portable storage media, their chances of being used in a crime have grown. Sifting through large volumes of evidential data during eDiscovery or forensically investigating them requires teams from both these fields to work together on a case. In this paper, the authors discuss the relationship between these disciplines and highlight the digital forensic skills required, sub-disciplines of digital forensics, the possible electronic artifacts that can be encountered in a case, and the forensic opportunities relative to the eDiscovery industry. Lastly, the authors touch upon the best practices in digital evidence management during the eDiscovery process.

Introduction Extract

When a civil lawsuit is filed, both the parties in the lawsuit engage in a pre-trial process known as “discovery”. During this process, each party may request documents and other evidence from the other or compel the other to produce such evidence using subpoenas or other legal instruments.

When such documents or evidence are in an electronic/digital format, this process is known as eDiscovery. Any potentially relevant digital evidence deemed necessary by either party may be subject to the eDiscovery process. This corpus of electronic/digital documents or other evidence is known as Electronically Stored Information (ESI). When civil litigation is reasonably anticipated by an organization or individual, they are expected to preserve prospective ESI from destruction. If/When litigation commences, eDiscovery follows wherein each party may be required to declare their ESI relevant to the case. Suppose the other party to the litigation requests this ESI for their own case preparation, the other party may produce this ESI in its original format if it seems related to the case, not privileged, within reasonable costs, and is reasonably accessible. Such ESI may not always be readily available and may need skilled professionals to forensically extract it from electronic devices. Thus, digital forensic professionals may participate alongside Discovery teams from both parties in forensically producing ESI during litigation. Parties to the case may engage digital forensic professionals on both sides if needed to assist in forensically producing ESI and also in validating the other’s ESI production methods.

Initially, the field of digital forensics was limited to personal computer disks. However, over the last few decades as computers have become connected through networks (local and the Internet) coupled with the growth of the cloud and smart devices such as smartphones, Internet Of Things (IoT), smart medical devices, smart energy grids, smart wearables, etc., personal computer forensics has now grown into digital forensics to encompass the investigation and analysis of these smart devices. The field of digital forensics has also expanded to include network forensics as well, which focuses on investigating networks for security breaches, hacking attempts, and data theft. In the last few decades, federal/state criminal investigators, global corporations, law firms, and private/public enterprises have relied on digital forensic investigators to investigate issues involving criminal activities, intellectual property theft, patent infringement, data theft, misconduct, and embezzlement. A digital forensic professional is someone who has a desire to follow the evidence, thereby assisting the lead investigators by identifying and analyzing digital clues from a pile of digital evidence. Digital forensic experts require a specialized skills to investigate various platforms such as the Internet, computers, smartphones, cloud, IoT, medical devices, accounting data, etc. To become a part of a digital forensic team, a digital forensic professional needs to coordinate with different teams in the investigation. Other teams in an investigation may be from law enforcement when in criminal cases and eDiscovery teams when in non-criminal (civil) litigation.

Complete Paper: Interplay of Digital Forensics in eDiscovery (PDF) – Mouseover to Scroll

IJCSS-1602 - Interplay of Digital Forensics in eDiscovery

Read the original paper.

Reference: Krishnan, S. and Shashidhar, N., 2021. Interplay of Digital Forensics in eDiscovery. [online] International Journal of Computer Science and Security (IJCSS), pp.19-44. Available at: https://www.cscjournals.org/manuscript/Journals/IJCSS/Volume15/Issue2/IJCSS-1602.pdf.

Additional Reading

Source: ComplexDiscovery


Have a Request?

If you have information or offering requests that you would like to ask us about, please let us know and we will make our response to you a priority.

ComplexDiscovery is an online publication that highlights cyber, data and legal discovery insight and intelligence ranging from original research to aggregated news for use by business, information technology, and legal professionals. The highly targeted publication seeks to increase the collective understanding of readers regarding cyber, data and legal discovery information and issues and to provide an objective resource for considering trends, technologies, and services related to electronically stored information.

ComplexDiscovery OÜ is a technology marketing firm providing strategic planning and tactical execution expertise in support of cyber, data and legal discovery organizations. Registered as a private limited company in the European Union country of Estonia, one of the most digitally advanced countries in the world, ComplexDiscovery OÜ operates virtually worldwide to deliver marketing consulting and services.

U.S. Department of Treasury Takes Actions to Counter Ransomware

According to Treasury Secretary Janet L. Yellen, “Ransomware and cyber-attacks are...

The NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE): September 2021 Cyber Events Report

The twelfth installment in the cyber events series published by the...

[Legal Education Webcast] Breaches, Responses, and Challenges: Cybersecurity Essentials That Every Lawyer Should Know

Every large corporation and organization today face the significant threat of...

Classifying Ransomware? A Ransomware Classification Framework Based on File-Deletion and File-Encryption Attack Structures

This paper evaluates attack methodologies of a ransomware attack: the underlying...

Mitratech Acquires Alyne

According to Mike Williams, CEO of Mitratech, "The combination of Alyne...

Magnet Forensics Acquires DME Forensics

According to the announcement, under the terms of the agreement, Magnet...

Consilio to Acquire Legal Consulting and eDiscovery Business Units of Special Counsel from Adecco

According to Laurie Chamberlin, Head of Professional Recruitment and Solutions North...

Nuix Acquires Natural Language Processing Company

According to Nuix CEO Rod Vawdrey, “Topos will strengthen Nuix’s product...

A New Era in eDiscovery? Framing Market Growth Through the Lens of Six Eras

There are many excellent resources for considering chronological and historiographical approaches...

An eDiscovery Market Size Mashup: 2020-2025 Worldwide Software and Services Overview

While the Compound Annual Growth Rate (CAGR) for worldwide eDiscovery software...

Resetting the Baseline? eDiscovery Market Size Adjustments for 2020

An unanticipated pandemeconomic-driven retraction in eDiscovery spending during 2020 has resulted...

Home or Away? New eDiscovery Collection Market Sizing and Pricing Considerations

One of the key home (onsite) or away (remote) decisions that...

Five Great Reads on Cyber, Data, and Legal Discovery for September 2021

From countering ransomware to predictive coding and packaged services, the September...

Five Great Reads on Cyber, Data, and Legal Discovery for August 2021

From the interplay of digital forensics in eDiscovery to collecting online...

Five Great Reads on Cyber, Data, and Legal Discovery for July 2021

From considerations for cyber insurance and malware to eDiscovery business confidence...

Five Great Reads on eDiscovery for June 2021

From remediating cyberattacks to eDiscovery pricing, the June 2021 edition of...

More Keepers? Predictive Coding Technologies and Protocols Survey – Fall 2021 Results

From the most prevalent predictive coding platforms to the least commonly...

Glowing Expectations? Eighteen Observations on eDiscovery Business Confidence in the Summer of 2021

In the summer of 2021, 63.3% of survey respondents felt that...

Issues Impacting eDiscovery Business Performance: A Summer 2021 Overview

In the summer of 2021, 24.4% of respondents viewed increasing types...

Looking Up? eDiscovery Operational Metrics in the Summer of 2021

In the summer of 2021, 80 eDiscovery Business Confidence Survey participants...