AccessData AccessData

eDiscovery Toolkit

Distributed processing is available with the following solutions:

FTK >
Total of 4 workers – one on examiner
machine and 3 distributed.

AD Lab Lite >
There is no limit to the processing
workers that can be purchased, and
the workers can be shared among users.

AD Lab >
There is no limit to the processing
workers that can be purchased, and
workers can be shared among users.

AD eDiscovery >
There is no limit to the processing
workers that can be purchased, and
workers can be shared among users.

 

Distributed Processing:
Impressive Test Results!

In testing, AccessData fully processed
a massive data set, including 62,649,383
items, of which there were well over
2 million emails and a total of 97,431
archive files that needed to be broken out.
The compressed size of this data set was
1.28 terabytes. A data set this large
would normally be divided into batches,
with each batch being processed
separately on stand-alone machines.
This could take a month to process,
using traditional tools, depending on the
hardware used. However with AccessData’s distributed processing technology, it only took 6 days, 5 hours.

 

Follow AccessData
LinkedIn RSS Twitter

Distributed Processing

AccessData’s Forensic Toolkit technology now delivers distributed processing capabilities. Each FTK license is able to leverage up to 4 processing workers (one on the FTK examiner machine and 3 distributed) to tackle massive data sets in a fraction of the time it would take using a single machine.

Each FTK user can have his or her own set of distributed workers. (Worker nodes cannot be shared). However, AccessData Lab and Lab Lite customers are able to share a distributed processing farm and shared database infrastructure.

Testing has shown an impressive increase in processing speed when utilizing distributed processing. You may use your legacy hardware single core machines or you can use 16+ core machines. FTK will utilize the processing capabilities of any supported computer you wish you to use. This gives you the flexibility to use the hardware you have to improve processing performance.

Reducing the processing time of complex and large data sets by more than half is an invaluable capability for investigative organizations, federal agencies and corporations inundated with forensic analysis and eDiscovery case loads.

TESTING METRICS

The following are testing metrics on various images, which were fully processed, using all 4 workers. Fully processed includes indexing, carving, metacarving and hashing. The computers in the worker cluster were all identical Windows 7 64-bit, 8GB RAM, AMD Phenom™ II X4 955 Processor 3.20 GHz (quad core).

Dataset

Improvements   Processing Speed

Processing speed increase in hours by number
of total workers being used
.

 

Percentage of processing improvement gained by
adding each additional worker
.

Brochures
What's New in FTK 3 >
Lab Lite Slick >
AD Lab Brochure >
AD eDiscovery Brochure >
AccessData Product webinars

FTK 3 Series:
   • UI Performance >
   • Mac Analysis >  
   • Live, Remote Data Acquisition >  
   • Explicit Image Detection >

Tips & Tricks:
   • Case Portability
>

   • FTK Field Mode >
   • Oracle Adjuster >