As part of an e-discovery process, an employee needs to identify all documents that contain a specific phrase. Which type of discovery method should…

Content-based discovery is the method used to search the actual data within files, such as the body of an email or the text of a document. The employee's task is to find a "specific phrase," which requires a full-text index search of the documents' content. This method directly inspects the substance of the files to identify those that contain the relevant keywords or phrases, making it the appropriate choice for this e-discovery requirement.

A. Location-based: This method searches for data based on its storage location (e.g., a specific server or folder), not the information inside the files.

C. Label-based: This searches for documents tagged with specific labels (e.g., "Confidential"), which is a form of metadata, not a content search.

D. Metadata-based: This method searches file properties like author, creation date, or file type, but not the actual text within the document.

1. Microsoft Official Documentation: In the documentation for Microsoft Purview eDiscovery

the process of finding relevant content is described using "Keyword queries and search conditions." It explicitly states

"Use keyword searches to find items that contain the search query keywords in the content of the item." This directly aligns with the definition of content-based discovery.

Source: Microsoft Learn

"Keyword queries and search conditions for eDiscovery." Section: "Keyword searches."

2. Academic Publication: The Electronic Discovery Reference Model (EDRM) is a standard framework in the field. The "Identification" phase involves locating potential sources of electronically stored information (ESI). This process includes searching based on content (keywords) and metadata. A study on e-discovery notes that identification techniques include "full-text searching" to find documents containing specific terms.

Source: B. J. H. van der Haf

"A review of the electronic discovery process

" Digital Investigation

vol. 11

no. 4

pp. 267-278

2014

Section 3.2 "Identification." DOI: https://doi.org/10.1016/j.diin.2014.09.003

3. University Courseware: In courses on digital forensics and legal technology

e-discovery methods are categorized. Content-based searching is defined as the process of using search terms and queries to find responsive data within a collection of documents

distinguishing it from metadata-based searches which only query the properties of the files.

Source: George Mason University

School of Business

"Electronic Discovery and Evidence

" MS in Management of Secure Information Systems. Course materials often describe the distinction between content

metadata

and system data searches in the EDRM framework.