Challenges
- The legal team needed a reliable partner to:
- Quickly assess and scope the data landscape
- Upgrade Microsoft 365 licenses for seven targeted custodians
- Collect critical data, including:
- Email and Microsoft Teams content (including modern attachments)
- Custodian OneDrive accounts
The timeline was non-negotiable, with only four days to complete the full scope of work from consultation through collection and delivery.
Expertise
Led by Sandline’s Forensics team, the project unfolded in close collaboration with the AM Law 100 attorneys and their corporate client. Our approach prioritized speed, precision, and real-time communication.
- Hosted internal and external scoping calls to clarify requirements
- Provided advisory support for upgrading M365 licenses to enable targeted collections
- Executed 21 separate collections across seven custodians
- Delivered rolling productions via KiteWorks to keep downstream review moving
- Maintained ongoing communication with the law firm team through morning, afternoon, and evening updates
- Compiled detailed documentation of each collection for defensibility
Results
- Total Data Collected: 195 GB across email, Teams, and OneDrive
- Turnaround Time: Initiated on Wednesday; final deliverable sent Saturday less than 4 days later.
- Post-Engagement Collaboration: Secondary consulting with the AM Law 100 team on workflows for handling modern attachments in Microsoft Teams
Why it Matters
This successful outcome not only met tight regulatory and client deadlines but also established a collaborative rhythm with the AM Law 100 team that continues today. As HSR matters grow in frequency and complexity, Sandline remains a trusted partner for forensic collection and advisory support under urgent timelines.
