The smart solution for E-Discovery

Blog

eDiscovery News

 

 
 

Indexed I/O's Real-Time Virus Scanning

In the world of eDiscovery, lurking viruses can be a huge threat.  These items are created and designed to be hidden amongst regular data and are often included in collections undetected.  

Many other processing technologies typically do not access data files in a manner that triggers, or ‘launches’, the malicious virus code. Because of this, most eDiscovery processing platforms scan for viruses on the output collection only.  Once the data has been filtered and reduced to the export collection, a scan for viruses takes place. There are many benefits to this method, especially in a traditional processing environment that doesn’t scale very well, because you are limiting the volume of data being scanned and thus reducing the needed resources (hardware, software, etc…) to scan that smaller set. This method allows non-scalable environments to maximize their resources.

However at Indexed I/O we are built from the ground-up to scale!  This means we have the resources needed to scan ALL electronic data at the time of processing.  By scanning viruses in real-time, our users can immediately identify and handle infected items.  Just like Indexed I/O’s real-time search indexing, our immediate virus scan allows our users to have full and immediate access to their processed data.

 
12.png
 

Designed with simplicity and efficiency in mind, Indexed I/O is the future of eDiscovery.

Want to learn more about how Indexed I/O can help you and your firm? Our experts can walk you through a demo and even give you a free trial! To learn more, contact us at 1.888.840.0709 or visit our website

About ClamAV
Indexed I/O utilizes the world’s most robust and effective open source virus scanning technology, ClamAV.  By seamlessly incorporating our real-time virus-scanning feature into the same scalable environment as our processing services, you are instantly aware of infected files and can make the necessary handling decisions without compromising on speed and processing rates.

ClamAV is an open source (GPL) antivirus engine designed for detecting Trojans, viruses, malware and other malicious threats. It is the de facto standard for mail gateway scanning. It provides a high performance multi-threaded scanning daemon, command line utilities for on demand file scanning, and an intelligent tool for automatic signature updates. The core ClamAV library provides numerous file format detection mechanisms, file unpacking support, archive support, and multiple signature languages for detecting threats.

Features:

  • Real-time virus scanning and detection

  • All infected items are tagged and the virus signature is included into the available metadata fields.

  • Detects over 1 million viruses, worms, Trojans (including Microsoft Office macro viruses), mobile malware, and other threats.

  • Virus signatures are updated before each collection is processed, insuring the most up-to-date scan possible.

  • Supports almost all mail file formats.

  • Support for other special files/formats includes:

    • HTML

    • RTF

    • PDF

    • Files Encrypted with CryptFF and ScrEnc

    • Uuencode

    • TNEF (winmail.dat

    • Supports Executable Files

      • Aspack(2.12)

      • UPX (all versions)

      • FSG (1.3, 1.31, 1.33, 2.0)

      • Petite (2.x)

      • PeSpin (1.1)

      • NsPack

      • Wwpack32 (1.20)

      • MEW

      • Upack

      • Y0da Cryptor (1.3)

For more information about ClamAV please visit http://www.clamav.net/lang/en/

Austin Smith-Bartlett