Rapid Response: Digital forensics, incident response & urgent collections321-704-1336|jchurch@digitalshield.net
eDiscovery Collections

Defensible collections across cloud, collaboration, mobile and endpoint data.

Digital Shield supports remote and onsite eDiscovery collection matters with source-specific workflows designed around scope, preservation, metadata, defensibility and downstream review.

Digital Shield shield
Remote & OnsiteCollection and investigative support based on matter requirements.
Targeted or Full ScopeWorkflows can be tailored to proportionality, privacy and investigative objectives.
Documented & DefensibleCollection records, validation, chain-of-custody and reporting support.
Legal + Investigative FocusTechnical work designed to support counsel, investigators and security teams.
Microsoft 365Google WorkspaceSlack / TeamsMobile DevicesEndpointsCustom Data
Collection Capabilities

Collect the data the matter requires—without treating every source the same.

Microsoft 365

Purview, Exchange, OneDrive, SharePoint & Teams

Custodian- and source-focused collection planning for email, Teams, OneDrive, SharePoint and cloud-linked content, with attention to date ranges, search criteria and preservation requirements.

Google Workspace

Gmail, Drive, Shared Drives & Vault

Collection and export workflows for Google Workspace data with attention to native files, metadata, shared content, file revisions, audit records and matter-specific search criteria.

Collaboration

Slack, Teams & Conversation Data

Collection, filtering, normalization and conversion of collaboration data for review platforms, including participant, channel and date-based scoping where the source permits.

Mobile

iOS, Android & Tablets

Full or targeted mobile-device collections designed around the requested applications, participants, conversations, attachments, date ranges and preservation needs.

Endpoints

Desktops, Laptops & Servers

Forensic imaging or targeted collection of folders, user profiles and defined evidence sources depending on the legal, investigative and proportionality requirements of the matter.

Specialized Sources

Web, Social, Cloud & Custom Data

Collections can extend to websites, social-media content, cloud platforms, archives, Salesforce and custom data sources where specialized extraction or conversion is required.

Collection Workflow

A repeatable process from scope through delivery.

Scope

Identify custodians, sources, timeframes, legal requirements and access constraints.

Preserve

Address holds, account state and steps needed to minimize loss or alteration.

Acquire

Collect using source-appropriate forensic, API, export or targeted workflows.

Validate

Review collection completeness, hashes, logs, metadata and exceptions.

Process / Convert

Filter, normalize or convert difficult datasets when required for downstream review.

Deliver

Transfer securely with documentation appropriate to the matter and receiving platform.

Targeted Collection

Proportional collection can reduce volume while preserving defensibility.

Not every matter requires a complete image or entire cloud-account export. Digital Shield can help counsel and investigative teams define a narrower collection based on custodians, participants, folders, applications, date ranges, file types or other supported criteria.

Where targeted collection is used, the scope and method should be documented so the receiving team understands what was included, what was excluded and what technical limitations applied.

Custodian and account scoping
Date-range and participant filtering
Application- or folder-specific collection
Attachment and linked-content handling
Metadata and source documentation
Exception and limitation reporting
Review-Ready Data

Collection is only useful if the data can be searched, reviewed and produced.

Native + Metadata
PST / Email
JSON / Collaboration
RSMF Conversion
Mobile Conversations
File Archives
Custom Conversion
Relativity-Oriented Workflows
Frequently Asked Questions

Questions clients ask before a collection or investigation.

Can Digital Shield perform collections remotely?

Yes. Many cloud, email, collaboration, mobile and endpoint matters can be supported remotely when access, security and matter requirements permit. Onsite collection remains available when physical access, network restrictions or evidentiary concerns make it more appropriate.

Can a collection be limited to specific custodians, dates or participants?

Often, yes. The available targeting depends on the source and collection method. The scope should be defined before collection and documented so the resulting dataset can be understood and defended.

Can Slack or mobile conversations be prepared for Relativity review?

Digital Shield can help organize and convert supported conversational datasets for modern review workflows, including RSMF-oriented processes where appropriate to the source and receiving platform.

How are metadata and chain of custody handled?

Collection logs, source information, validation steps, hashes where applicable, transfer records and exception notes are maintained according to the collection method and matter requirements.

Do you collect complete devices as well as targeted folders or applications?

Yes. The appropriate method depends on the case. A full forensic image may be warranted for investigations requiring deleted data or broad artifact analysis, while litigation collections may call for narrower, proportional acquisition.

Urgent forensic, incident response or preservation matter?

Contact Digital Shield directly so scope, access, preservation and secure transfer requirements can be addressed immediately.

Call 321-704-1336