What We Do
How we do it
Our Threat Response Unit (TRU) publishes security advisories, blogs, reports, industry publications and webinars based on its original research and the insights driven through proactive threat hunts.
View Threat Intelligence Resources →
Mar 15, 2023
CVE-2023-23397 - Microsoft Outlook Elevation of Privilege Zero-Day Vulnerability
THE THREAT On March 14th, as part of Microsoft’s monthly Patch Tuesday release, the company disclosed a critical, actively exploited vulnerability impacting Microsoft Office and Outlook. The…
Read More
View all Advisories →
About Us
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 2000+ organizations in 80+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
Read about how we got here
Leadership Work at eSentire
Mar 20, 2023
Exertis and eSentire Partner to Deliver 24/7 Multi-Signal MDR, Digital Forensics & IR Services and Exposure Management to Organisations Across the UK, Ireland, and Europe
Basingstoke, UK– 20 March, 2023. Leading technology distributor, Exertis, announced today that it has bolstered its cybersecurity services, adding eSentire, the Authority in Managed Detection and Response (MDR), to its Enterprise portfolio of offerings. eSentire’s award-winning, 24/7 multi-signal MDR, Digital Forensics & Incident Response (IR), and Exposure Management services will be available…
Read More
e3 Ecosystem
We provide sophisticated cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). Find out why you should partner with eSentire, the Authority in Managed Detection and Response, today.
Learn more
Apply to become an e3 ecosystem partner with eSentire, the Authority in Managed Detection and Response.
Login to the Partner Portal for resources and content for current partners.
Blog — Jun 17, 2021

CyFIR eDiscovery: A Legal Department Use Case

3 minutes read
Speak With A Security Expert Now
This blog was originally published on CyFIR.com and has been reposted as-is here following eSentire’s acquisition of CyFIR Inc. in June 2021. As of the date of the acquisition, no changes have been made to the content below.

Collecting forensically-sound information is a critical need for Legal Departments during many proceedings, such as when responding to a subpoena, preparing for litigation, or during a merger or acquisition. This use case example illustrates how CyFIR eDiscovery Services can significantly improve the process of collecting and storing evidentiary data, resulting in faster and more accurate results.

The first time Emily heard about Project Showerhead, it was only an internal R&D project. As General Counsel, she had reviewed the patent filing related to the underlying technology. Few within the company realized at that time how many commercial applications Project Showerhead would have. Now, five years later, the project was fundamental to the company’s largest source of revenue. It was also at the center of ongoing litigation with their main competitor.

Emily knew the company was on solid ground to defend their intellectual property claim in court. She suspected that their competitor – a company ten times their size – had filed the lawsuit in an attempt to slow their growth by forcing them to divert resources into a costly and time-consuming legal battle. Emily knew their competitor had deeper pockets and more lawyers, but she had one advantage their competitor did not.

One of the first steps in preparing for litigation was to execute a company-wide search for all documents relevant to the project. Using CyFIR, one of Emily’s eDiscovery technicians began a company-wide keyword search that examined the full text of documents stored on any machine across their network, including field offices around the country. The search also examined email messages stored on their Exchange server and local Outlook PST files of specific employees assigned to Project Showerhead. The technician copied all the documents to a local storage location and placed a report summarizing the results on Emily’s desk. The entire eDiscovery search had evaluated hundreds of thousands of files and returned a complete set of evidentiary data in less than a day. With CyFIR, one technician was able to complete one of the most time-consuming tasks in preparing for litigation.

As Emily had anticipated, their competitor eventually dropped the lawsuit. Due to CyFIR’s speed and accuracy, preparing evidentiary data for the case had taken only a minimal amount of time and effort, and did not require an army of lawyers to complete.

Unparalleled Results.

Emily’s company licensed the CyFIR Enterprise Platform primarily for its Incident Response capabilities. However, her story demonstrates how CyFIR’s ability to search across an entire network can deliver significant value for Legal Departments when tasked with collecting documents from across the company. CyFIR reduces the labor-intensive nature of enterprise-wide search and document collection that is common during subpoenas or audits, in preparation for mergers and acquisitions, or in demonstrating regulatory compliance.

Some of the key takeaways from this example include:

View Most Recent Blogs

eSentire is the Authority in Managed Detection and Response, protecting the critical data and applications of 2000+ organizations in 80+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events. Combining cutting-edge machine learning XDR technology, 24/7 Threat Hunting, and proven security operations leadership, eSentire mitigates business risk, and enables security at scale. The Team eSentire difference means enterprises are protected by the best in the business with a named Cyber Risk Advisor, 24/7 access to SOC Cyber Analysts & Elite Threat Hunters, and industry-leading threat intelligence research from eSentire’s Threat Response Unit (TRU). eSentire provides Managed Risk, Managed Detection and Response and Incident Response services. For more information, visit www.esentire.com and follow @eSentire.