Relativity Collect Flashcards

1
Q

Collect Overview

A

Application for collecting custodian’s Google Workspace data, Microsoft 365 emails and documents, Slack messages, and X1 emails

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Creating a collection

A
  1. Click “Collections” sub-tab
  2. Click “New Collection”
  3. Complete the steps in the Collect Wizard
  4. click Run Collection in console
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Using the Collect Wizard

A
  1. Collection Details
  2. Custodians
  3. Configure Data Source
  4. Collection Summary
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Collection Details

A
Name
Collection matter - Edit or Add
Processing Source Location
ZIP Collected Files - toggle to compress all collected data into Zip64 containers
Zip Password
Job Number
Description
Receive Progress Notifications
Notification Address
Data Source Type
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Custodians

A
  1. Use column filters to locate custodians
  2. Click a check box next to a custodian
  3. Add select custodians or bulk add all custodians
  4. Click “NEXT”
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Configure Data Source

A

Data Source Criteria - add criteria to collect specific data
Collecting Preserved Files - no extra steps need to be taken to collect preserved files as they are automatically included in the collection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Data Source Criteria

A

Select and unselected tabs - choose data sources to collect from
Field - choose the field to filter on (only required when a calendar source is selected)
Operator - equals, contains, greater than, less than
Value - enter value in selected field

e.g. “Email To” Contains “Barry”

Click “Add Criteria” - each separated by an “AND” operator
Leave data source criteria empty to collect all data from the sources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Collection Summary

A

If targets weren’t created, click “Generate Targets” - will check to see if they exist and automatically create targets base don email address
View Collection Details

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Collect Console

A
Start Collection
Generate Targets
Stop Collection
Retry Collection
Create Processing Job
Clone Collection
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Storing Collected Data

A

If selected “Yes” to Collect Files in ZIP - compressed folders separated by the custodian target
Folders will split when reaching set size
Can be secured with a password
Data can be exported with the RelativityOne Staging Explorer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Viewing Collected Data - Modified Path or File Name

A

Path names - 260 character limit, if truncated path name already exists, will add a version number
File names - modified if documents have been deleted form a SharePoint or OneDrive for Business site that’s been placed on a preservation hold

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Generate Targets

A

Retrieve all known Collect targets based on the custodians and data sources selected (Google Workspace, Microsoft 365, X1)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Start/Stop Collection

A

Click to initiate the collect project, or to end the collection project that is currently running (will prompt a pop-up message)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Retry Collection

A

Available when a collect job doesn’t complete because of errors

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Create Processing Job

A

Create a processing set from the collected documents from the data sources. These are in the Processing Source Location set in Collection details

Select a Processing Profile, with the option to “Clone Profile”, then click “Submit Collection”

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Clone Collection

A

Duplicates the open collect job. Any collect job that has a status other than “new” can be cloned

Once a job is cloned, it is placed in the “Not Started” status and can be found in the Collections list under the same name with “Cloned - YYYY-MM-DD HH.MM.SS” attached to the end

Cloned collect job will also generate new targets

17
Q

Reports from Console

A

Generate reports in collection console, which will trigger download of files

18
Q

Creating a Collect Data Source

A
  1. Click “New Collection Source Instance” button
  2. Enter a unique name for the source
  3. Select the type of data source (Google Workspace Chat, Drive, etc, Microsoft 365 Mailbox, OneDrive, etc, Slack, X1 Emails/Files)
  4. Enter Information in Settings appropriate to source type
    i. Google Workspace - Client Id, Client Secret, refresh Token, Temporary Code
    ii. Microsoft - Domain, Application ID, Application secret
    iii. Slack - Temporary Code, Access Token
    iv. X1 - see documentation
  5. Click Save - if connection fails, message will appear indicating that the collection failed
19
Q

Slack Filter Criteria

A

NB - Slack has a 200 MB processing limit
Archived Slack channels can be collected but deleted Slack channels cannot be

  1. Channel Name - all messages within the channel that equal the search word or phrase
  2. End date - all messages the day of and before
  3. Message Type - returns all direct or group messages
  4. Slice Interval in hours - all messages within a specific time range - default slice interval is 24 hours
  5. Start Date
20
Q

Setting up a Slack Data Source

A
  1. Enable an org for API access - Slack org must be on the Enterprise plan, and owner needs to email exports@slack.com to gain API access

Relativity Process

  1. Navigate to the Collection Admin tab
  2. Click New Collection Source Instance
  3. Enter in a unique name for the data source
  4. Select the “Slack” data source
  5. Click “Install Application”, log in as org owner if necessary
  6. click “Allow”
  7. Go to page where you can copy temporary code
  8. Paste code in “temporary code” field
  9. Generate Access Token
  10. Click Save
21
Q

Collect Reports - Collection Summary Report

A

Target, target status, number of items collected, collection size
Grouped by custodians with subtotals for each
Report downloads as a PDF file

22
Q

Collection Details Report

A
  1. Successfully collected results of all items and their metadata
  2. Errored collection data

Report downloads as a CSV file; report is also stored in the assigned Azure AD file share and included in the collection output

23
Q

Results Report

A

CSV file download of the results collected from the target (empty if no results)

Results report link for each target downloads as a CSV file that contains a list of all individual items collected

Includes emails, files, etc, and all associated metadata for each item

24
Q

Hash identifier - SHA-256

A

In the spreadsheet there is an electronic fingerprint named SHA-256; when collecting documents Microsoft adds the SHA-256 hash identifiers then stores the hashes. A user can verify the original file by matching the SHA-256 identifiers

This is included in the Results report file and the Collection details report file

25
Q

Errors Report

A

CSV download of errors that occurred during the collection from the target (if no errors, file is empty)

If application is reporting errors with requests, creating objects, or parsing, check for correct permissions, healthy connections, and check if the fileshare is working.

Report file lists one error per line, with error ID alongside message of the error that cause the item failure.

Per-item errors only occur in download phase; if an error occurs before (if data is unavailable) or after (worker can’t write results.csv file to fileshare) then there will be no record in the errors. csv report

26
Q

Graph Error Codes

A

An issue with Graph when downloading an item - see Microsoft’s Graph Errors documentation

  1. Transient - Microsoft Graph API has received too many requests
  2. Authentication - error with authentication of Collect application, check Azure application associated with collection source
  3. Modification - error occurs when data changes between discovery and download
  4. File - Graph API prevents Relativity from collecting items marked as malware
  5. HTTP - 400 (bad request), 401 (unauthorized), 403 (forbidden), 404 (Not Found), 429 (too many requests), 504 (gateway timeout), 509 (bandwidth limit exceeded)
  6. Other Errors - InvalidOperationException (downloaded item has identifier doesn’t match Microsoft’s hash identifier); ArgumentExceptions - something other than a file is a attached to an event or message
27
Q

Collect Store

A

Large volumes of raw collected evidence can be stored in the RelativityOne Store instead of being processed right away.

Migrating data to storage before processing or review reduced consumption of physical space and reduces RelativityOne resources during an upgrade

28
Q

Moving collected data into storage

A

When creating a collection job, you have to select a Processing Source Location. The Store option is available in the Processing Source Location drop-down menu in the first step of the Collect Wizard

29
Q

Exporting Collected Data

A

Use RelativityOne Staging Explorer to export the collected data located in the store