What We Do
How we do it
Our Threat Response Unit (TRU) publishes security advisories, blogs, reports, industry publications and webinars based on its original research and the insights driven through proactive threat hunts.
View Threat Intelligence Resources →
Jun 03, 2022
UPDATE: CVE-2022-26134 – Confluence Zero-Day Vulnerability
THE THREAT June 3rd Update: Atlassian has released security patches to address this vulnerability. On June 2nd, 2022, Atlassian disclosed a critical vulnerability impacting the Confluence…
Read More
View all Advisories →
About Us
eSentire is The Authority in Managed Detection and Response Services, protecting the critical data and applications of 1200+ organizations in 75+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events.
Read about how we got here
Leadership Work at eSentire
May 17, 2022
Cybersecurity Leader eSentire Continues Its Commitment to Rigorous Security Standards Earning PCI DSS Certification
Waterloo, ON, May 17, 2022 — eSentire, the Authority in Managed Detection and Response (MDR), maintains one of the most secure and robust IT environments of any MDR provider in the industry. To that end, eSentire today announced that it has received the Payment Card Industry Data Security Standard (PCI DSS) certification, considered one of the most stringent and comprehensive payment card…
Read More
e3 Ecosystem
We provide sophisticated cybersecurity solutions for Managed Security Service Providers (MSSPs), Managed Service Providers (MSPs), and Value-Added Resellers (VARs). Find out why you should partner with eSentire, the Authority in Managed Detection and Response, today.
Learn more
Apply to become an e3 ecosystem partner with eSentire, the Authority in Managed Detection and Response.
Login to the Partner Portal for resources and content for current partners.
Blog — Jun 17, 2021

CyFIR eDiscovery: A Legal Department Use Case

3 minutes read
Speak With A Security Expert Now
This blog was originally published on CyFIR.com and has been reposted as-is here following eSentire’s acquisition of CyFIR Inc. in June 2021. As of the date of the acquisition, no changes have been made to the content below.

Collecting forensically-sound information is a critical need for Legal Departments during many proceedings, such as when responding to a subpoena, preparing for litigation, or during a merger or acquisition. This use case example illustrates how CyFIR eDiscovery Services can significantly improve the process of collecting and storing evidentiary data, resulting in faster and more accurate results.

The first time Emily heard about Project Showerhead, it was only an internal R&D project. As General Counsel, she had reviewed the patent filing related to the underlying technology. Few within the company realized at that time how many commercial applications Project Showerhead would have. Now, five years later, the project was fundamental to the company’s largest source of revenue. It was also at the center of ongoing litigation with their main competitor.

Emily knew the company was on solid ground to defend their intellectual property claim in court. She suspected that their competitor – a company ten times their size – had filed the lawsuit in an attempt to slow their growth by forcing them to divert resources into a costly and time-consuming legal battle. Emily knew their competitor had deeper pockets and more lawyers, but she had one advantage their competitor did not.

One of the first steps in preparing for litigation was to execute a company-wide search for all documents relevant to the project. Using CyFIR, one of Emily’s eDiscovery technicians began a company-wide keyword search that examined the full text of documents stored on any machine across their network, including field offices around the country. The search also examined email messages stored on their Exchange server and local Outlook PST files of specific employees assigned to Project Showerhead. The technician copied all the documents to a local storage location and placed a report summarizing the results on Emily’s desk. The entire eDiscovery search had evaluated hundreds of thousands of files and returned a complete set of evidentiary data in less than a day. With CyFIR, one technician was able to complete one of the most time-consuming tasks in preparing for litigation.

As Emily had anticipated, their competitor eventually dropped the lawsuit. Due to CyFIR’s speed and accuracy, preparing evidentiary data for the case had taken only a minimal amount of time and effort, and did not require an army of lawyers to complete.

Unparalleled Results.

Emily’s company licensed the CyFIR Enterprise Platform primarily for its Incident Response capabilities. However, her story demonstrates how CyFIR’s ability to search across an entire network can deliver significant value for Legal Departments when tasked with collecting documents from across the company. CyFIR reduces the labor-intensive nature of enterprise-wide search and document collection that is common during subpoenas or audits, in preparation for mergers and acquisitions, or in demonstrating regulatory compliance.

Some of the key takeaways from this example include:

Join 100,000+ Security Leaders

Get notified of the latest news, intel and helpful tools & assets. You can unsubscribe anytime.

By clicking the button below I confirm that I have read and agree to the eSentire privacy policy.

View Most Recent Blogs

eSentire is the Authority in Managed Detection and Response, protecting the critical data and applications of 1200+ organizations in 75+ countries from known and unknown cyber threats. Founded in 2001, the company’s mission is to hunt, investigate and stop cyber threats before they become business disrupting events. Combining cutting-edge machine learning XDR technology, 24/7 Threat Hunting, and proven security operations leadership, eSentire mitigates business risk, and enables security at scale. The Team eSentire difference means enterprises are protected by the best in the business with a named Cyber Risk Advisor, 24/7 access to SOC Cyber Analysts & Elite Threat Hunters, and industry-leading threat intelligence research from eSentire’s Threat Response Unit (TRU). eSentire provides Managed Risk, Managed Detection and Response and Incident Response services. For more information, visit www.esentire.com and follow @eSentire.