symantec clearwell ediscovery platform™ · 2016. 7. 4. · symantec clearwell 7.1.3 introduces...

Symantec Clearwell eDiscovery Platform™

New Features Overview 7.1.3

New Features Overview, Version 7.1.3 PAGE: 2

Clearwell eDiscovery Platform: New Features Overview The software described in this book is furnished under a license agreement and may be used only in accordance with the terms of the agreement.

Last updated: 2013-06-06

Legal Notice

Copyright © 2013 Symantec Corporation. All rights reserved.

Symantec, the Symantec Logo, the Checkmark Logo, Clearwell and the Clearwell eDiscovery Platform are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. The product described in this document is distributed under licenses restricting its use, copying, distribution, and decompilation/reverse engineering. No part of this document may be reproduced in any form by any means without prior written authorization of Symantec Corporation and its licensors, if any. THE DOCUMENTATION IS PROVIDED “AS IS” AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE LEGALLY INVALID. SYMANTEC CORPORATION SHALL NOT BE LIABLE FOR INCIDENTAL OR CONSEQUENTIAL DAMAGES IN CONNECTION WITH THE FURNISHING, PERFORMANCE, OR USE OF THIS DOCUMENTATION. THE INFORMATION CONTAINED IN THIS DOCUMENTATION IS SUBJECT TO CHANGE WITHOUT NOTICE. The Licensed Software and Documentation are deemed to be commercial computer software as defined in FAR 12.212 and subject to restricted rights as defined in FAR Section 52.227-19 "Commercial Computer Software - Restricted Rights" and DFARS 227.7202, et seq. “Commercial Computer Software and Commercial Computer Software Documentation”, as applicable, and any successor regulations. Any use, modification, reproduction release, performance, display or disclosure of the Licensed Software and Documentation by the U.S. Government shall be solely in accordance with the terms of this Agreement. Symantec Corporation 350 Ellis Street Mountain View, CA 94043 http://www.symantec.com

http://www.symantec.com/


Contents Contents ................................................................................................................................................................................................................ 3

About this Document ...................................................................................................................................................................................... 5

What’s New in 7.1.3? ......................................................................................................................................................................................... 5

General Features ................................................................................................................................................................................................ 6

Case Description Enhancements ............................................................................................................................................... 6

Web Service API: Case Creation .................................................................................................................................................. 6

Hold Notice Enhancements ......................................................................................................................................................... 6

Email Information for System Administrator and Custodian Notices ................................................................ 6

Admin Bcc Recipient Added to Create Legal Hold Screen ..................................................................................... 6

Family Propagating Tag Set Behavior...................................................................................................................................... 6

Advanced Search Changes .......................................................................................................................................................... 7

New Tag Search Options ...................................................................................................................................................... 7

Exported Reports Enhancement ....................................................................................................................................... 8

Search Hit Report Feature.................................................................................................................................................... 8

Symantec eDiscovery Product Improvement Program .................................................................................................... 9

What kind of information is collected? ........................................................................................................................... 9

Privacy and Anonymity ......................................................................................................................................................... 9

How is information sent? ..................................................................................................................................................... 9

Opting Out ................................................................................................................................................................................. 9

Custodian Management Feature ............................................................................................................................................................. 10

Search and Preview Analytics Features ................................................................................................................................................. 10

EV Search and Preview ............................................................................................................................................................... 10

EV Search Tasks ..................................................................................................................................................................... 10

View Email Addresses in EV Archives .................................................................................................................................... 12

Email Header Search .................................................................................................................................................................... 12

EV Journaling Enhancements .................................................................................................................................................................... 13

Collection Feature .......................................................................................................................................................................................... 13

Retry EV Collection Task ............................................................................................................................................................. 13

Processing Features ....................................................................................................................................................................................... 14

New Reports User Interface ...................................................................................................................................................... 14

De-Duplication Report ....................................................................................................................................................... 14

De-Duplication by Custodian .......................................................................................................................................... 14

Discovery and Processing Options Report ................................................................................................................. 14

Not Processed Documents Report ................................................................................................................................ 14

Other Type - Extensions Report ...................................................................................................................................... 15


Processing Reconciliation Report .................................................................................................................................. 15

Improved Container Handling ................................................................................................................................................. 15

Analysis & Review Features ........................................................................................................................................................................ 16

Transparent Predictive Coding Graphs ................................................................................................................................ 16

Prediction Status Enhancements ........................................................................................................................................... 16

Accuracy Test Reports Enhancements ................................................................................................................................. 16

Export & Production Features ................................................................................................................................................................... 17

Image Remediation ...................................................................................................................................................................... 17

Export Audit .................................................................................................................................................................................... 17

Slipsheet Enhancement ............................................................................................................................................................. 17

System Administration Features .............................................................................................................................................................. 18

In-Product Notification ............................................................................................................................................................... 18

Obtaining More Product Information .................................................................................................................................................... 18


About this Document This document provides a high-level overview of the new features and enhancements available in version 7.1.3, grouped into the following sections:

• General Features

• Custodian Management Feature

• Search and Preview Analytics Features

• EV Journaling Enhancements

• Collection Feature

• Processing Features

• Analysis & Review Features

• Export & Production Features

• System Administration Features

What’s New in 7.1.3? Symantec Clearwell 7.1.3 delivers enhanced Case and Custodian Management, with more case description and notice options, tag set enhancement, more powerful and simplified tag search criteria, and a fully integrated custodian management feature.

This release delivers significant enhancements in the Identification and Collection module, with deeper EV integration through journaling enhancements, pre-collection search, and preview analytics capabilities.

Version 7.1.3 enhances its Processing and Analysis & Review modules with significant reporting improvements, streamlined container handling for case administrators, predictive coding graphs and reporting, plus image remediation and other export and production enhancements.


General Features

Case Description Enhancements

Symantec Clearwell 7.1.3 now provides the ability to add more input options on case creation. This allows the Case Administrator to manage the case using detailed information, including case number, case and court dates, legal team members, jurisdiction details, and other custom fields.

This enhancement first appeared in 7.1.2 fix pack 2.

Web Service API: Case Creation

Symantec Clearwell 7.1.3 introduces a new web service API to invoke case creation and update. This web service API provides users the ability to invoke case creation and update without having to access the Clearwell User Interface. Such APIs can be useful to automate case creation from 3rd party systems into Clearwell cases.

This feature first appeared in 7.1.2 fix pack 2.

Hold Notice Enhancements

Email Information for System Administrator and Custodian Notices

The Legal Holds Add System Admin Notice and Add Custodian Notice “Email Info” fields have changed. Now there is a field for “Cc” recipients for each notice. This enhancement first appeared in 7.1.2 fix pack 2. This enhancement first appeared in 7.1.2 fix pack 2.

Admin Bcc Recipient Added to Create Legal Hold Screen

On the Status and Hold Settings page, there is now a field for “Admin Bcc Recipient”. The Admin Bcc recipient receives all notice types as a Bcc recipient. This is distinct from the list of Cc recipients on the Sys Admin and Custodian Notices, who are visible. This enhancement first appeared in 7.1.2 fix pack 2.

Family Propagating Tag Set Behavior

Symantec Clearwell 7.1.3 introduces tag enhancement work to support a new family propagating tag behavior for tag sets. Tag sets with family propagation behavior enabled can have tags easily propagated to the attachments. The reverse scenario is also supported where a user can apply tags to an attachment and have the tags easily propagated to the rest of the document family members.


Search filter displays have been enhanced to show both item and document family tag counts. Case settings made by the case administrator determine which count is the default view.

Users have a choice of displaying tag filters with document family counts by clicking on the button with the letter D, or all tag filters with item counts (including attachments and embeddings) by clicking on the button with the letter I.

Advanced Search Changes

New Tag Search Options

Symantec Clearwell 7.1.3 introduces more powerful and simplified advanced tag search criteria options. The new options to “find documents that have” as a tag filter option replace the 7.1.2 options for Messages and Loose Files, Email Messages, Attachments, Loose Files, and Embeddings. The new tag search option to find documents improves the ability to search for document family tagging combinations with just a single search.


Exported Reports Enhancement

In Symantec Clearwell 7.1.3, exported reports are in .xls format. This improves report readability and the handling of UTF-8 characters.

Search Hit Report Feature

New in Symantec Clearwell 7.1.3, this report includes information about keyword hits in the collection data. Users can now employ this feature to map Doc IDs to keyword hits. Since the keyword filter is item-based, the counts are also item-based. To be included in the report, the keyword search results must return at least one keyword that is a hit.

Note: The report requires that the Advanced Search option generate keyword details for filters and report option be selected.


Symantec eDiscovery Product Improvement Program

Symantec Clearwell 7.1.3 introduces a program designed to improve the product and user experience.

What kind of information is collected?

This feature logs activity while running and provides configuration and performance metrics to Symantec, such as:

System and Environmental Data

• Operating System and patches applied

• Version of Clearwell and third party software information

Feature Usage Information

• Search performance (without specifics, such as terms), frequency of feature use (such as “find similar, “discussion”), tagging and foldering activity and performance

• Export and Production performance

Privacy and Anonymity

The information is gathered without names, user-defined labels, or case content. These statistics, counts, and timings are used to improve product performance and supportability.

How is information sent?

The information and metrics are sent via a secure SSL connection over the internet.

Opting Out Symantec is committed to protecting user privacy and to improving the user experience through the information collected by this program. Nonetheless, users have the option to decline to participate.

• During the product installation process, users can uncheck the “Participate in the Symantec eDiscovery Product Improvement Program”

• At any time a System Administrator can enable/disable participation in the product improvement program via the property browser.


Custodian Management Feature Symantec Clearwell 7.1.3 introduces the fully-integrated Custodian Management feature using a streamlined custodian-centric workflow. Administrators not only have the ability to match the custodian manager features in Symantec’s Discovery Accelerator, but can also use new customization capabilities for the attributes that can be tracked.

• Custodian Manager will track changes made to a user with an Active Directory (AD) environment, or from periodic CSV/Script imports from other 3rd party employee management systems.

• Administrators will also be able to create custom attributes to be synchronized with AD, or with CSV/Script imports.

• Custodian Manager can also alert Case Managers when case custodian data changes.

Leveraging custodian management features offers the ability to keep track of any changes made to a an employee’s information within a corporate Active Directory (AD) environment so that these changes, such as email address, name, or title, can be maintained in the eDiscovery workflow. It provides a single repository for the employee information, which is updatable through automated imports.

Search and Preview Analytics Features

EV Search and Preview

Symantec Clearwell 7.1.3 introduces the ability to run search-only tasks against Enterprise Vault sources, preview sample files, and run date range and custodian-based analytics on the results. From the collections module, Collections administrators can use the EV Search Tasks feature as a way to submit a search, preview the data, and analyze statistics without having to collect, hold, or change search parameters. This gives the customer the ability to perform basic Early Case Assessment at an earlier phase of the eDiscovery process.

EV Search Tasks

Adding an EV Search Task is nearly identical to adding a Collection Task. To preview the results of the successful search, administrators simply click on the search task from the EV Search Task screen and select the Sample Preview tab:


From Sample Preview, administrators can view the content of the results including the ability to view or download any attachments.

In visual graphic form, users can view the information by Custodian or Timeline, Chart or Table and Relative or Search Size. These details can also be exported as a CSV or XLS file format for review.


View Email Addresses in EV Archives

Symantec Clearwell 7.1.3 provides email address visibility when selecting and filtering Enterprise Vault (EV) archives and mailboxes associated with a collection task. This allows users to quickly identify which archives to add to a collection task.

Note: This feature applies to EV Exchange archives, EV Domino archives, Exchange mailboxes and Domino mailboxes. These sources must contain custodian email addresses, which excludes Journals, SharePoint, and any other sources that do not normally contain email address information.


Email Header Search

Email Header Search lets users search though the Internet Headers section of emails. This includes standard header fields (To, Cc, Bcc, Subject, From) and custom header fields the customer may choose to index (e.g.: X-Originating-IP, Received-By). With this feature, users can search for emails coming from or received by a particular domain, IP address or any other property of the email. Users may also export all of the email headers to a csv/dat file for further analysis or consumption by a downstream application.


EV Journaling Enhancements Symantec Clearwell 7.1.3 now provides the ability to collect, process, view, search, and export fully-expanded “Bcc” and distribution list information in an “envelope” format that also contains the original Enterprise Vault (EV) Journal message. This allows users to:

• automatically collect full Journal message information from EV sources during collection, showing individual recipients (Journal envelope information, plus original message)

• configure case setting (prior to processing) to process Journal envelope information, allowing reviewers and administrators to:

• perform advanced searches based on Journal envelope information, and view “Bcc” information and the expanded distribution lists (after processing, in the Analysis & Review module)

• export Journal messages with additional Journal messaging format options

Note: For support from EV sources, this feature requires EV version 10.0.2 or greater. This feature only applies to new collection tasks, and only to Exchange Journal email messages (does not apply to Domino email messages).

This enhancement first appeared in 7.1.2 fix pack 2.

Collection Feature

Retry EV Collection Task

Identification and Collection users now have the ability to retry collection tasks for EV sources that failed to run successfully.

• This feature applies to tasks that resulted in “Partial Success” or “Partial Failure” in which at least one item was successfully collected.

• From the Analytics screen, the bar graph or chart (or table) is updated to reflect the new item counts (from the source, and total collected).



Processing Features

New Reports User Interface

Symantec Clearwell 7.1.3 introduces a new UI for generating Processing reports, for greater usability. The Reports screen allows case administrators to generate reports easily, replacing the former processing reports view, which had fewer reports available. All the new reports are available on the left panel with corresponding report options to the right:

De-Duplication Report

Symantec Clearwell 7.1.3 performs de-duplication during processing across all document sources and all custodians in a case. The De-duplication report shows a complete and comprehensive list of every location for each duplicated document.

De-Duplication by Custodian

In addition to De-duplication reporting, the De-duplication by Custodian report shows how much the document set has been de-duplicated during Processing with the de-duplication percentage for the associated custodians.

Discovery and Processing Options Report

To provide alternative ways to filter the data set prior to Processing, the Discovery and Processing Options report generates a list of these Discovery and Processing options used for each Discovery or Processing batch, or Processing Source.

Not Processed Documents Report

The Not Processed Documents report is now expanded to include explanations for documents not processed. For example, the report would provide information for why a document was discovered but not processed, or that it was excluded from Discovery and Processing based on the different exclusion criteria (such as date range, size range, file types and extensions, de-NISTing, and container file count). This level of detail helps case administrators address and resolve document issues more quickly, saving valuable re-processing time.


Other Type - Extensions Report

As part of Pre-Processing, the system offers a holistic view of the data set prior to Processing. A new graphic visual helps users filter by document type. The category “Other types” shows all the document types that are not displayed on this graph. The Other Type - Extensions report provides this information by generating a summary and list of documents that are considered "Other Types" in Pre-Processing.

Processing Reconciliation Report

The Processing Reconciliation Report provides an all-in-one view into Discovery and Processing information for greater end-to-end workflow visibility. The system reports information both at the file level and source, or sub source-level to describe how the data set is consumed from Discovery and Processing with tied-out counts. With this report, users can generate a summary and list of files on disk, plus the corresponding document and item counts needed for reconciliation. For example, the report shows what’s discovered, how much data is extracted, what gets indexed, what is excluded, and accounts for the number of the files that are discovered and processed.

Improved Container Handling

Symantec Clearwell 7.1.3 improves container extraction management by allowing users to exclude by container format for discovery. The system not only applies exclusion rules to top-level loose files and messages, but can also apply the same exclusion rules to attachments. Enabling exclusions based on container type can help increase both discovery and processing performance.


Analysis & Review Features

Transparent Predictive Coding Graphs

Version 7.1.3 improves the presentation of prediction accuracy data by displaying the information in a graphical format. Users now have the ability to more easily view and understand the prediction accuracy of their Transparent Predictive Coding processes.

Prediction Status Enhancements

Prior to this release, users would have to manually discern progress in accuracy over iterations by viewing individual accuracy test reports. In 7.1.3, the Prediction Status screen has been enhanced with a graph of prediction accuracy over the iterations. The graph displays the highest calculated f-measure and accompanying f-measure range for each iteration, complete with a visual comparison to the desired f-measure specified by the Controlled Prediction Accuracy Test.

Accuracy Test Reports Enhancements

Prior to 7.13, the Controlled Prediction Accuracy Test Report and the Prediction Accuracy Test Report were in a text-only CSV format. For increased compatibility, both reports have now been updated to an XLS format divided into Summary and Detail sheets. The Summary sheet displays all of the testing settings, threshold recommendations with test results, and projected item counts. The Detail sheet displays the test results for all thresholds, along with an accuracy metrics graph to visually display the data.


Export & Production Features

Image Remediation

Version 7.1.3 now allows users to better manage and control document imaging, especially for handling in other third-party tools. Using the image remediation feature, users have the ability to:

• Quickly identify which documents can and cannot be processed as images

• Select and export documents without exporting the entire document family

• Import the images of these documents, either in bulk, or individually

• Track the documents imaged by Symantec Clearwell and by other third-party tools

When the Image Overlay feature is enabled in Symantec Clearwell, reviewers can easily identify the documents that cannot be image processed, select and export them, and then import multiple images, or one at a time.

Export Audit

Export audit is an audit report generated after every export job that details how many items were selected for export, how many were skipped, how many were error out, how many were successfully exported and how many pages were exported. This provides users with a clear understanding of item counts at each stage of export and helps them identify errors in their export easily.

Slipsheet Enhancement

In 7.1.3, the Slipsheet feature provides users with the ability to customize slipsheets for each production. (In prior versions, a default message and the DocID of the document were printed on Production Slipsheets.) Users can now specify the header, footer and text (including additional dynamic content such as Page Number, Document ID) to be printed on the slipsheets.


System Administration Features

In-Product Notification

Symantec Clearwell 7.1.3 introduces a new, in-product notification to notify admin users of new upgrade, rollups, and patch availability. When there are any new upgrades, rollups, or patches available, a new notification will appear for users with “Allow System Management” permissions on the Dashboard or System Settings page. The check for updates requires Internet connectivity to the Symantec updates server.

Obtaining More Product Information To obtain more information, refer to:

• Symantec Knowledge Base for the Clearwell eDiscovery Platform –- Go to:

http://www.symantec.com/business/support/index?page=landing&key=60705

• Phone — Dial Toll-Free (North America): 1-800-342-0652

For regional contact numbers, go to:

http://www.symantec.com/business/support/techsupp_contact_phone.jsp

• Documentation link — View the most current online and PDF versions of the documentation by clicking the Documentation link at the bottom of any page in the Symantec Clearwell eDiscovery Platform.

• Online help — Click the Help link in the Clearwell user interface to access the Symantec Clearwell eDiscovery Platform Help Center

http://www.symantec.com/business/support/index?page=landing&key=60705http://www.symantec.com/business/support/techsupp_contact_phone.jsp

ContentsAbout this DocumentWhat’s New in 7.1.3?General FeaturesCase Description EnhancementsWeb Service API: Case CreationHold Notice EnhancementsEmail Information for System Administrator and Custodian NoticesAdmin Bcc Recipient Added to Create Legal Hold Screen

Family Propagating Tag Set BehaviorAdvanced Search ChangesNew Tag Search OptionsExported Reports EnhancementSearch Hit Report Feature

Symantec eDiscovery Product Improvement ProgramWhat kind of information is collected?Privacy and AnonymityHow is information sent?Opting Out

Custodian Management FeatureSearch and Preview Analytics FeaturesEV Search and PreviewEV Search Tasks

View Email Addresses in EV ArchivesEmail Header Search

EV Journaling EnhancementsCollection FeatureRetry EV Collection Task

Processing FeaturesNew Reports User InterfaceDe-Duplication ReportDe-Duplication by CustodianDiscovery and Processing Options ReportNot Processed Documents ReportOther Type - Extensions ReportProcessing Reconciliation Report

Improved Container Handling

Analysis & Review FeaturesTransparent Predictive Coding GraphsPrediction Status EnhancementsAccuracy Test Reports Enhancements

Export & Production FeaturesImage RemediationExport AuditSlipsheet Enhancement

System Administration FeaturesIn-Product Notification

Obtaining More Product Information