Aim: To provide a collection methodology for acquiring ESI in litigation matters, governmental inquiries, and internal investigations in a legally defensible manner.

Extract from EDRM

“Collection is the acquisition of potentially relevant electronically stored information (ESI) as defined in the identification phase of the electronic discovery process. The exigencies of litigation, governmental inquiries, and internal investigations generally require that ESI and its associated metadata should be collected in a manner that is legally defensible, proportionate, efficient, auditable, and targeted. The process of collecting ESI will generally provide feedback to the identification function which may impact and expand the scope of the overall electronic discovery process.”

Your requirements

You may have already started with a collection and are encountering difficulties, or require expert assistance to undertake the entire process.

You require a New Zealand based team who are experts in collecting data from a wide range of sources, potentially to a forensic standard.

How we can help  

Incident Response Solutions can provide legally defensible, proportionate, efficient, auditable, and targeted forensic collection of data. With our broad range of tools and experience we can create forensic copies of data from computers, servers, mobile devices and cloud locations. Some of the tools we provide our experience with are:

Tableau Td2u

Full-featured, fully-forensic hardware duplicator that offers ease of operation, reliability, and ultra-fast forensic imaging of hard disks and solid-state-drives.

Magnet Axiom

Forensic software used to acquire images and analyse evidence from mobile devices (including smartphone with iOS, Android and more), computers and cloud sources.


Forensic software that collects from a range of sources, including cloud based email accounts. Nuix Workstation is the world’s leading technology for extracting intelligence from high-volume unstructured, semi-structured, and structured data. It saves you time, increases productivity, and streamlines workflows.


A “live” Linux distribution based on Ubuntu that simplifies various forensics tasks in a forensically sound manner. Particularly useful when hard drives cannot be removed from a laptop.