Advice for Paralegals and Litigation Support Professionals – November 2022 | Association of Certified Electronic Discovery Professionals (ACEDS)

11/6/2022: Hash values ​​for files sent via MMS can vary

Mobile phones use the Multimedia Messaging Service to send multiple video, audio, and images. It contrasts with the SMS service which can only send text up to 160 characters per message. Unlike other files collected from a mobile device, images sent on separate occasions via MMS can have different hash values. A study conducted by researchers at Purdue University concluded that “while the results of the majority of tests were standardized, the reported hash values ​​for data objects transmitted via MMS were variable.” Shira Dunker, Rick Ayers, and Richard B. Hash Technologies for Mobile Forensics3 Small Scale Digital Device Forensics J.No. 1 (June 2009).

The study shows that the same JPEG file sent via MMS on different devices at different times will have a completely different hash value.

11/11/2022 – Find a regular expression to find lines that start with the same letters

You can do a Regex search which will find consecutive lines starting with the same letters. this search:

^ ((.{10}).*)(?:r?n2.*)+

. . . It will check the first 10 characters at the beginning of a line and check to see if the same 10 characters appear at the beginning of the next line.

. . . Adding $1 in the replace window will remove every duplicate line.

11/19/22 – Outlook search anomalies – max 250 results, 1050 or more?

Performing searches in Outlook isn’t necessarily straightforward. You can use standard Boolean operators when doing a search:

Find: A law firm will return any messages that include Both reformers.
Search for: law, a company that will return any messages that include also term.
Search for: law or company will return any messages that include also term.
Searching for: law AND firm will return any messages with Both reformers.
Searching for: “law firm” will return any messages containing this phrase.

See emphasis on this over here. Note that when doing a search for “law, firm” in the standard search tool accessed in the Inbox it will run as “BOolean search, law AND firm”, but Searching for “law, company” in the advanced search works as a boolean search, breach report, or.

Entering a search term in Outlook without the asterisk will trigger a wildcard search for the term (or string). So a search for: law will return messages that include the terms, “legal” ; “lawyer”, etc.

If you search in the search tool at the top right of your inbox, Outlook, using the default setting to search the current mailbox, will search the text of all email attachments. However, the default setting in Outlook will limit results to 250 messages. You can remove this limit, in Outlook 2019, by going to File. . . Options . … search, and uncheck the “Improve search speed by limiting the number of results shown” box.

This only increases the search result limit to around 1000. [The limit appears to be 1050 – based on my tests when a search is run for very common terms in a full Inbox such as “conflict check” or “district court”, only 1050 messages appear in the results. I can’t find confirmation of this on Microsoft site. ] It is possible that changing the registry key will remove the limitation completely. We see: https://answers.microsoft.com/en-us/outlook_com/forum/all/critical-outlook-search-issue/36980334-1a74-4db8-b989-39ea12b693c8

In order to get full search results, you need to switch the setting from “Current mailbox” to “All Outlook items”

[To be clear, if the ‘Improve search speed by limiting the number of results shown’ box is checked, it won’t matter if you have ‘All Outlook Items’ selected, the result limit will still be 250.]

After running the search, you will still need to click the option to show more results at the bottom of the screen.

When searching in Outlook, there is also the option to use the advanced search tool. Click in the search box at the top right of the screen and a new Search tab will appear. Select “Advanced Search” from the list of search tools.

Advanced search does not have the same limitations as search results. However, even if the search is set to run in “Subject field and message body”, or “Frequently used text fields”, the search will not include the text of attachments in email messages. As far as I know, advanced search does not give you a way to search the text of attachments.

It would be possible to perform a search in the advanced search for references to a term or terms that occur in the email body or subject field, and then perform a search using the standard search tool that focused only on the text of the attachments. In the Search tab, from the +More list, select Attachment Contains

If the search term you’re looking for appears in attached text with no more than 1,000 messages, you should get everything you’re targeting by combining results from the advanced search with the standard search tool.

Also note that when you perform a search in the standard search tool, it may take some time for it to complete even after clicking on the display option more Results. Find this notice at the bottom of the screen:

11/28/22 – Putting IE into Edge

Note that although Internet Explorer is no longer supported by Microsoft, there is an Internet Explorer mode available in the Edge browser.

Many older applications are still only programmed to run in IE, but newer Windows may not allow IE to run.

Under Default browser options in Settings, Edge will let you switch to a mode that will use your old browser