Preserve. Collect. Filter. Forensically Sound Litigation Support

Depending on your ESI scenario, we have you covered! Don’t take a chance with “drag and drop” or any other unsound methods. Here is a comparison of our proven, industry leading, and easy to use Pinpoint Labs file collection and preservation software tools.

FEATURES AND BENEFITS COMPARISON CHART SafeCopy 2

Desktop SafeCopy 2

Nomad SafeCopy 2

Server Harvester Portable

Harvester

Server

Create and Deploy Remote Collections Across Multiple Clients and Networks

X

Keyword Filter MS Outlook PST’s, loose files, attachments, and archives X X Dedupe, and Filter Multiple PST’s - regenerate new PST’s, or export to 8 individual message formats. X

X

Removes System Files Included In NSRL List (deNISTing) X X Filter by Header Signature Analysis X X Create Portable and Automated Collections (preconfigured work orders) X X Use For In-House Production Level Culling (deNISTing/deduping) and Onsite Collection Projects X

X

Scriptable Profiles and Collection Jobs For Increased Flexibility X X Easily Save and Reuse Job Settings X X

Easily Transfer Licenses to Other Locations, Portable Drives, or Server (runs without installation on host computer) X X X

X

Captures Files With Paths Greater Than 255 Characters X X X X X Instantly Up and Running (No shipping delays for hardware or software) X X X X X Easily Resume (In Case of System Crash or Power Outage) X X X X X Process File List X X X X X Extensive Chain of Custody Report X X X X X

100% File Copy Verification X X X X X

Compatible With All Electronic and Litigation Platforms X X X X X Select From Multiple Data Sources X X X X X Filter By Extension and Date Range X X X X X Preserves Metadata and Time Stamps X X X X X Great for Legal Holds X X X X X

One Click Collect – Harvester 2.0 allows you to capture the files you need and cull them down at collection so you aren’t burdened by clutter. Why pay to process unnecessary files if you don’t have to? Now you can work more efficiently and save money in the process!

One Click Collect - Harvester 2.0Forensically Sound Copies

Features:a Preserve Metadata and Timestampsa Capture Files with Paths Greater than 255 Charactersa Create Extensive Chain of Custody Reporta 100% File Copy Verificationa Keyword Cull Loose Files, PST Emails, Archives, and Attachments a Select from Multiple Data Sourcesa Create Portable and Automated Collectionsa Script Profiles and Collection Jobs for Increased Flexibilitya Activate and Deactivate the Software License to Distribute with Easea Create and Deploy Remote Collections Across Multiple Clients and Networksa Dedupe and Filter Single or Multiple PSTs a Dedupe, DeNIST and Header / Signature Analysis

With One Click Collect Harvester 2.0, we give you options, flexibility and

savings.

To learn more about One Click Collect Harvester 2.0

or to obtain the software,

call 1-888-304-1096 or email sales@pinpointlabs.com.

One ClickCOLLECT

You Can Have it Your Way by Saving Your Culled-Down PST Data into a Single PST, Multiple PSTs (One to One), or Other File Formats (msg, html, txt, etc.)

One Click Collect - Harvester 2.0Forensically Sound Copies

“…by far the best value in eDiscovery tools on the market.”-Jim S. Fortune 500 Company

“Harvester from Pinpoint Labs is getting us in the door with clients. Knowing that Jon Rowe is the driving force behind the product and his experience in the litigation software field makes the decision a no brainer. Having access to the development team and customer service that treats you like you are their only client is very refreshing. And in today’s world that is hard to find.”- Clark Ross, OwnerRelevant Data Technologies

“The volume of network data required to be searched within tightly defined parameters for what we could extract led us to test several products from PinPoint Labs.

Once we saw the flexibility and robust capacity of Harvester, the choice was obvious and quick. We have used Harvester on several large projects successfully and look forward to many more using this capable tool. “-Jim Pollock, Certified Computer ExaminerEagle Technology Associates

“I was presented with the daunting task of processing 60 PST files (30 GB) at 8:00 am in preparation for depositions the same afternoon.

The client provided eleven key words, two domain names and a date range.

Utilizing OCCH I was able to cull down the paper equivalent of two million pages to a couple of hundred responsive emails, completing the discovery in a couple of hours.

Needless to say, the client was thrilled.

Thanks for a very fine product.”-Jason Park, Certified Computer ExaminerProtegga

“As Director of e-Discovery at Spotts Fain, PC, I have had the opportunity to use what I consider to be one of the most productive pieces of forensic software on the market today–SafeCopy. I am not only amazed at its functionality in conducting ESI collections, but also its affordability. In my opinion, there is no forensic collection tool that has a better value for the dollar. We have just upgraded to Harvester which has a deNISTing and deduplication functionality, as well as, key word culling, PST filtering and regeneration, automated job tickets, and header/signature analysis. Again, a tremendous value, priced far under forensic tools that run from $3,000 - $5,000. I do not know how you do it, Pinpoint Labs, but thank you.” -Michael Yager, Directory of E-DiscoverySpotts Fain

What People Are Saying About OCCH... One ClickCOLLECT

To learn more about One Click Collect Harvester 2.0

or to obtain the software, call 1-888-304-1096

or email sales@pinpointlabs.com

Pinpoint Labs White Paper

02.08.2010 Page 1

8246 Oddo Ciccle Murray, NE 68409

402.250.9969 www.pinpointlabs.com

By Jon Rowe, President Certified Computer Examiner (CCE)

A Pinpoint Labs White Paper

02.08.2010 Page 2

Contents

Introduction 2 Problem Statement 2 Previous Options 3 One Click Collect Solution 3 Implementation 3 Summary 6

Introduction One Click Collect is a product family developed by Pinpoint Labs. It allows for the remote, automated, collection of relevant electronic files pursuant to a discovery request.

Problem Statement Incomplete and undocumented electronic discovery collections occur every day. The result of mishandling these files can be costly to both the client and their legal counsel. During the course of fulfilling an electronically stored information (ESI) discovery request, corporations use software, and processes which do not fulfill the obligations required for a defensible collection. The results include but are not limited to: 1) Altered file timestamps and metadata 2) Incomplete collections due to files in

long paths or files missed during software malfunctions

3) Undocumented processes 4) Missing ‘Chain of Custody’ 5) User errors 6) Error logging 7) Lack of custodian source details 8) Job criteria used during collection 9) Incorrect batch or script files Normally, a discovery request is created and the corporate IT department or other client employee copies relevant files or directories to disc or USB drive. From the client’s perspective, this is the least costly way to collect data. It can be, however, the most costly way in the long run. The integrity of files collected from corporate

Pinpoint Labs White Paper

02.08.2010 Page 3

servers and client machines are in jeopardy because many electronic document collections are completed using tools which lack the ability to confirm results and properly document the processes. Client System Modifications Current collection efforts should include using applications and processes which preserve the native states on servers and individual client PC’s. However, many file collection utilities require an installation on corporate systems, which can introduce multiple obstacles: • Corporate IT policies may prevent

installing new software without prior approval

• Transferring software licenses between systems may require purchasing multiple copies or contact the developer

• Collection software may not have all file dependencies on target computer

File Collection software should ideally be portable and run without installation. The ‘zero footprint’ software option preserves the native state of the servers and client machines.

Previous Options Software utilities like Robocopy, Microsoft Windows Copy, and XXCopy are commonly used by corporate IT departments, computer forensic professionals, and litigation support technicians. When these applications are used for ESI collections the above issues

are commonly encountered, potentially exposing the clients to sanctions, and other penalties. This is due to a lack of defensible standards, and tools. Advising clients about proper file collection methods must be considered from the beginning of each case. Using processes and applications which preserve and verify collected electronic files with minimal impact on client systems is critical. Without these, creating defensible and verifiable electronic discovery productions and evidence authentication is difficult, if not impossible.

One Click Collect Solution As a result of these crippling issues, a new breed of ESI collection software was developed. One Click Collect from Pinpoint Labs works from preconfigured file requests created by users to ensure full control. This eliminates errors that are commonly associated with self collection. Additionally, files copied retain their file timestamps, metadata, hash verifies each file, and a chain of custody containing details for each file is created. If any problems are encountered during the process, a real-time alert is displayed as well as stored in a log file.

Preserves File Stamps and Metadata Insuring collected files retain their modified, accessed, created (MAC) times and metadata is critical. Many copy or burning processes modify the source and target file time stamps and don’t complete copies because they do not incorporate a hash or checksum verification process. One Click Collect not only preserves the file system time stamps, it also hash verifies each file

Pinpoint Labs White Paper

02.08.2010 Page 4

and alerts users if there are any discrepancies. Files in Long Paths Files relevant to a document production commonly reside in paths greater than 255 characters. Most applications are unable to copy these files because Microsoft Windows is limited to seeing any files in long paths. Consequently the files are missed during collection and therefore not available for review. One Click Collect can locate files in paths up to 32,000 characters. Users can be confident when using One Click Collect that these relevant files will be identified copied, and a noted in the collection log.

Instantly Up and Running Unlike other products One Click Collect doesn’t require security dongles, and will install on the clients choice of media. Licenses may be immediately downloaded, and users can begin creating job files or running a collection.

Portable or Network (Harvester License) One Click Collect – Harvester can be used as either a portable or network license. This provides optimal flexibility and allows users to easily switch on-the-fly. Place your Harvester license on an external drive and collect from multiple computers today, and install it on network attached storage (NAS) tomorrow for scripted, remote network collections.

Create and Deploy Remote Collections Using One Click Collect job tickets, you are in control of the collection from the very beginning of the project. Combining job tickets with the autostart and “stealth” options you can trigger collections across town or across the world. Compatibility Collected files are stored in their native format and immediately compatible with all electronic discovery processing, and review platforms. No additional conversion or forensic image mounting software is required. Share Licenses Everywhere One Click Collect licenses can be easily deactivated (checked in) and, immediately reactivated (checked out) on other media instantly. No need to ship hardware, cases or security keys. Reduce ESI Processing Costs One Click Collect – Harvester incorporates a hash list filtering engine which allows users to deNIST system, applications, and duplicate files during collection or in house. This will considerably reduce processing and storage fees especially when using applications that charge per gigabyte fees. Pinpoint Labs has included it’s highly optimized deNISTing engine from PG Pinpoint in One Click Collect - Harvester. Portable deNISTing is now a reality and can be easily fit on a USB flash drive!

Implementation Installation One Click Collect products are a result of highly optimized code that requires very little space and resides in a single folder. “Installing” OCC is accomplished by

Pinpoint Labs White Paper

02.08.2010 Page 5

unzipping the source files to the media of choice and registering the software. During an online activation the software contacts Pinpoint Labs servers to check out the requested license(s). When an internet connection is unavailable, offline activation can be completed by emailing or calling a customer service representative with the serial number displayed. An activation key is provided to complete the registration. Portable Mode When One Click Collect – Harvester or Onsite files are unzipped to USB devices or internal hard drives users will choose the portable option. This option registers the device to the media provided. The activated license will only work with the original target media. Network Mode One Click Collect Harvester (only) has the additional option of being installed in a shared (UNC path) location. This option allows access to OCC from any system mapped to the shared location. No local installation is required on the target computers. OCCH, and individual job files can be launched from a command line or scripts. Customers routinely use OCCH to script collections on remote computers without physically being at the PC. In addition to using switches to launch“stealth” collections, other command line options can be set and activated on completion. For example, this option

could be used to initiate notification to an email distribution list or post job updates to litigation hold portals. Production deNISTing Although One Click Collect – Harvester is most commonly viewed as a collection platform, it has an equally valuable use as a production level deNISTing tool. Several service bureaus have found that installing OCCH on a network drive provides the most affordable and powerful deNISTing, filtering platform available. The OCCH (unlimited) option provides an affordable deNISTing option because it is the only software that allows customers to initiate a filtering project across all systems on the network for the same cost. Transferring Licenses As previously mentioned OCC licenses can be deactivated and reissued to new devices and shared locations. Internet access is required to complete the process. One Click Collect Licenses One Click Collect – Onsite - Preserve file time stamps and metadata - Automated collections - Filter by file headers - Automatically locate logical and mapped

drives or target computer - Automatically creates target folders

based on computer name, logged in user name, collection date

One Click Collect – Harvester (H3) Includes the above plus: - Starts with 3 concurrent licenses with

option to add more - Scripting - Hash list filtering (deNISTing, deduping)

Pinpoint Labs White Paper

02.08.2010 Page 6

- License works on portable device and network

One Click Collect – Harvester (Unlimited) Includes the above plus: - Unlimited network connections - Only counts as single portable

license and commonly used only on network share

One Click Collect - Publishing - Special large volume licensing

option for One Click Collect – Harvester or Onsite

- Licensed by the month, or large quantity low per temp license rate

Summary Many recognize that preserving, verifying, and documenting ESI collections not only confirms relevant files are acquired; it helps legal departments avoid spoliation and demonstrates to their client they are implementing best practices. As inside counsel, general counsel, and corporate IT departments learn more about litigation readiness, it becomes more important that their partnering legal departments keep abreast of the changes and are the ones leading the way. Being proactive and recommending the proper methods and tools for ESI collections (especially self collection) will ensure consistent results and provide a “heads-up” on any issues encountered. Many legal departments and service providers rely on One Click Collect from

Pinpoint Labs for active file collections because the jobs can be preconfigured, and the results are documented producing an automated and defensible collection. About Pinpoint Labs Pinpoint Labs was founded by Jon Rowe and James Beasley, who are Certified Computer Examiners (CCE) and member of The International Society of Forensic computer Examiners (ISFCE). Their experience includes more than 18 years of litigation support experience and over two decades in software development.

Pinpoint Labs Releases One Click Collect - Harvester Server Edition

Forensically Collect and Preserve Active File Data From Multiple Custodians At Same Time

Each day, corporate IT managers, computer forensic examiners, and litigation support professionals need to collect relevant files that reside in file shares, on client systems, and in other data sources across the network. One Click Collect Harvester Server Edition (OCCHS) solves the common problems encountered when using alternative copy utilities.

Murray, NE (For Immediate Release) May 21st, 2010 --- Pinpoint Labs, a forensics software developer and litigation support firm, today announced the release of the latest addition to its One Click Collect family of forensic software – Harvester Server Edition. This new version is designed to simultaneously take care of multiple custodian collections that reside on the network, making it the perfect choice for large and small scale ESI collections and legal holds. With the ability to script the software and its user friendly interface, it is the most hassle-free way to collect and preserve electronic discovery files.

The goal of any electronic discovery collection is to preserve and collect files while keeping the chain of custody intact. One Click Collect - Harvester Server Edition (OCCHS) has the ability to cull down the collection at the point of contact. This makes multiple collections much easier to manage and less expensive to process. OCCHS gives you unlimited concurrencies to dedupe, deNIST, cull, and filter ESI collections.

In keeping with the best practices for preserving and collecting data, Pinpoint Labs designed OCCHS to easily gather multiple files with minimal impact on client systems. When the client project is finished, all the critical data is neatly organized and forensically sound. It is also one of the most affordable solutions available to collect and preserve project data.

As Jon Rowe, President of Pinpoint Labs and an experienced Certified Computer Examiner (CCE) noted,

"We are very proud to announce the Harvester Server license. We constantly hear about the corporate budget restraints related to litigation. We know we have created a product that companies can afford, and allows them to complete defensible collections."

For more insight on how One Click Collect - Harvester Server Edition can save you time and money, please visit our Pinpoint Labs website by clicking on www.pinpointlabs.com

About Pinpoint Labs

Pinpoint Labs was founded by Jon Rowe and James Beasley, who are Certified Computer Examiners and members of The International Society of Forensic Computer Examiners. Their experience includes over fifteen years of litigation support and more than two decades in software development. Visit our website to download our freeware utilities for use by the forensic community.

Pinpoint Labs Releases One Click Collect - Harvester 2.0

Industry Leading Electronically Stored Information (ESI) Collection Software Includes Keyword Culling and PST Regeneration

Each day, corporate IT managers, forensic computer examiners, and litigation support professionals need to perform keyword-targeted collections of custodian work product that reside in file shares, on client systems, and in other data sources across the network. One Click Collect Harvester 2.0 rapidly culls down hundreds of Gigabytes or even Terabytes of data providing ready to review, relevant documents and email.

Murray, NE (For Immediate Release) November 1st, 2010 --- Pinpoint Labs, a forensic software and litigation support firm, today announced the release of the latest addition to its One Click Collect family of forensic software – Harvester 2.0. This new version is designed to perform keyword culling for loose files and Microsoft Outlook PST files and attachments, making it the perfect choice for projects requiring targeted collections outlined in legal holds. With the ability to dedupe and regenerate new PST files, the size of ESI collections can be significantly reduced without the costs associated with per gigabyte or custodian fees.

The goal of any electronic discovery collection is to preserve and collect files while keeping the chain of custody intact. One Click Collect - Harvester 2.0 has the ability to cull down the collection at the point of contact. This makes multiple collections much easier to manage and less expensive to process. Harvest 2.0 preserves file timestamps, metadata and the chain of custody.

In keeping with the best practices for preserving and collecting data, Pinpoint Labs designed Harvester 2.0 to easily gather multiple files with minimal impact on client systems. When the client project is finished, all the critical data is neatly organized and forensically sound. It is also one of the most affordable solutions available to collect and preserve project data.

As Jon Rowe, President of Pinpoint Labs and an experienced Certified Computer Examiner (CCE) noted,

"We are very proud to announce the Harvester 2.0. Once again we have responded to the marketplace and the need for affordable, defensible ESI collection software. The new keyword filtering and PST regeneration features are equally effective for collecting data in the field or as first pass filtering for in-house processing.”

For more insight on how One Click Collect - Harvester 2.0 can save you time and money, please visit the Pinpoint Labs website at www.pinpointlabs.com.

About Pinpoint Labs

Pinpoint Labs was founded by Jon Rowe and James Beasley, who are Certified Computer Examiners and members of The International Society of Forensic Computer Examiners. Their experience includes over fifteen years of litigation support and more than two decades in software development. Visit our website to schedule a product demonstration or request an evaluation license.

Desktop | Server | Nomad

Incomplete and undocumented electronic discovery collections occur every day. The result of mishandling these files can be costly to both the client and their legal counsel. Proper file collection methods should be discussed at the beginning of each case.

When collecting electronic discovery, you should use processes and applications that preserve and verify collected electronic files with minimal impact on client systems. Without these, creating defensible and verifiable electronic discovery productions and evidence authentication is difficult, if not impossible.

SafeCopy 2 is offered in several different formats tailored to fit your needs and the needs of your project. Now you can quickly and easily obtain defensible forensically sound active file collections.Pinpoint Labs

www.pinpointlabs.com8246 Oddo Circle Murray, NE 68409 (402) 235-2381

1-888-304-1096

Forensically Sound File Collection

SafeCopy 2Active File Collection Utility

SafeCopy 2 Features:a Select from multiple data sources (such as file shares, individual files or file list) a Support for paths greater than 255 characters (up to 32,000) a Will resume automatically after network outagesa Real time error displaya100% file copy verification (using MD5 hash comparison)a Preservation of file system timestamps and metadataa Filter by file extension (inclusion, exclusion and use file extension) and date range

To learn more about SafeCopy 2 or to obtain the software,

call 1-888-304-1096 or email sales@pinpointlabs.com.

www.pinpointlabs.com

SafeCopy 2 Desktop a Installed on the local computer a Licensed to a single system a Capable of accessing all local and networked devices

SafeCopy 2 Server a Perfect for companies with ongoing collection needs a Freedom to use SafeCopy 2 on any computer on your network a Runs from server, external USB or NAS device a Small footprint a No installation required

SafeCopy 2 Nomad a Easily distribute temporary SafeCopy license a Perfect for clients who have a one time, short term collection project a Hassle free – no USB drive or software to track or return a Runs from external hard drive, flash drive or server a Create job file for automated collection