ISEEK is a live-client, process-based ESI collection and search tool designed for eDiscovery, digital forensics, incident response, and IT compliance. Operating entirely in memory without requiring installation on target endpoints, it uses a patented disk-level search algorithm to locate and collect responsive data across networks of any size, with no indexing required.

Key Features & Functions:

Agentless, In-Memory Operation
ISEEK runs without installation on target machines and leaves no footprint on endpoints. It operates invisibly in accordance with an encrypted instruction set, eliminating the need for pre-deployment, hands-on access, or network disruption during processing.

Patented Non-Indexed Search
Rather than creating background indexes, ISEEK applies a patented search method that locates responsive data directly from live data stores. It searches across all drives, network shares, locked and live documents, email files, compressed files, and all document types without requiring files to be unlocked or copied.

Parallel Processing Across Distributed Environments
ISEEK can be deployed concurrently across any number of endpoints, including remote machines, and supports large-scale network queries without requiring physical or on-site access. Processing takes place on the endpoint using original data stores.

Encrypted Output and Collection
Results are compiled into 256-bit AES encrypted, password-protected containers and transmitted to a specified destination, including local drives, network shares, or cloud storage. Metadata is captured for all collected files, and an encrypted audit report is generated on collection.

Export and Review Tool Integration
Responsive content can be extracted from encrypted results containers in multiple formats, including generic load files and a Relativity-specific load file. An API is available for direct access to encrypted results containers.

Digital Forensics and Incident Response
ISEEK supports collection of forensic artefacts including event logs, registry files, USN journals, SRUM databases, deleted files across NTFS and FAT filesystems, SQLite databases, and system memory images. It can identify executable files in unusual locations and flag files containing executable code regardless of file type or extension.

Auditing and Compliance
In list-only mode, ISEEK collects metadata spreadsheets rather than file content, enabling network-wide audits without data movement. Use cases include software licence auditing, identification of unauthorised applications, and inspection for inappropriately stored sensitive data.

Language-Neutral Search
ISEEK employs a disk-level search approach that operates independently of language encoding, supporting non-English and symbolic-based languages without requiring language-specific configuration.