The era of big data is placing investigators under increasing pressure as the data involved in investigations continually grows, becomes more complex and is stored in more places within an organisation.
This is stretching resources to capacity for internal investigators, data forensics specialists and information security managers. Everyone wants answers faster but traditional methods for evaluating electronic evidence are becoming unsustainable.
As a rule of thumb, the number of devices containing data involved in a typical investigation doubles every two years. In corporate environments, evidence can be stored in file shares, email databases, email archives and document management systems, to name a few.
SOURCE: scmagazine.com.au
