Last updated:
Knowledge base
I am Joachim Ally. The same questions keep coming back in my assignments as an expert: how do I get a mailbox out of Microsoft 365, how do I reduce it to what the order asks for, how does the lawyer receive it safely, and how do I show later that nothing has changed.
I keep learning along the way, and I find that endlessly interesting. What is truly reusable I share here with colleagues: the tools I use, with the settings and pitfalls that matter. I believe in the power of sharing knowledge.
Who I am and what I do is on ronagold.be (Dutch only).
Collecting
- Microsoft Purview eDiscovery: getting mailboxes out of Microsoft 365 with a hold, a search and an export.
- GoldFynch: loading and filtering a mailbox, better and more reliably than with the filter in Outlook. You pay per case, without a subscription.
- Why an e-discovery platform: why taking everything and filtering afterwards is more accurate than choosing on site.
Handing over
- Two-channel transfer: data and key over two separate channels.
- Boomerang: large files online, with a PIN and an expiry date.
- Tresorit: a shared folder for viewing, with access logs.
- Integrity: SHA-256 hashes recorded in the signed report.
Also
- Exhibit bundle: all exhibits in one PDF that opens in any reader, including your browser, with numbering that shifts along when another exhibit comes in later.
- Email as evidence: why a screenshot of Sent does not prove receipt.
The figures come from my experience at the time of writing and may be out of date: check the date at the top of the page. Rates and limits come with a source. Nothing on this site is about any single case; why and how is explained in the colophon.