Abstract: Systems and methods are provided for managing the destruction of documents in an organization that includes a cascaded destruction of the documents in distributed systems. The systems and methods include capturing electronic evidence in a central evidence management system as objects from sources in the distributed systems. The objects are stored in a repository. When documents are eligible to be deleted, the central evidence management system destroys the objects representing the documents in the repository. A delete command is sent to agents at the sources in the distributed system that causes the agents to delete and destroy the documents from the file systems in the distributed systems.

Abstract: Systems and methods are provided for policy enforcement on electronic evidence captured from at least one source. The contents of the captured electronic evidence are indexed, and the captured electronic evidence is classified based on the indexed contents by associating the electronic evidence with one or more classes. It is determined whether one or more policies apply to the classified captured electronic evidence. When two or more policies apply to the classified captured electronic evidence, a conflict between the two or more policies is resolved to select the one or more policies to enforce. The systems and methods also enforce the selected one or more policies on the classified captured evidence.

Abstract: Systems and methods for placing a hold on captured electronic evidence are provided, the captured electronic evidence having one or more associated policies that are applied to the captured electronic evidence. The captured electronic evidence is stored in a repository. The exemplary systems and methods determine whether to place a hold on the captured electronic evidence, and indicate the captured electronic evidence as being on hold. The exemplary systems and methods place the one or more policies of electronic evidence management associated with the captured electronic evidence indicated as being on hold in a pending state.

Abstract: Systems and methods are provided for electronic evidence management for autonomic metadata scaling. The exemplary systems and methods comprise capturing electronic evidence from at least one source, and storing the captured electronic evidence in a repository. Classification metadata is dynamically created to identify one or more classes. The stored electronic evidence is dynamically classified into the one or more classes with the dynamically created classification metadata.

Abstract: Systems and methods are provided for managing sequestration of electronic evidentiary objects in an organization with distributed systems. The systems and methods include capturing in a central evidence management system objects from sources in the distributed systems. The objects are stored in a repository. Selected objects are selectively sequestered, which includes sequestering the selected objects at the sources. In certain embodiments, the sequestering of the selected objects at the sources is achieved by agents provided at the sources by the central evidence management system.

Abstract: Systems and methods for creating metadata are provided in which electronic evidence is captured, the electronic evidence comprising a binary large object, extrinsic metadata, and intrinsic metadata. The extrinsic metadata and the intrinsic metadata are extracted from the captured electronic evidence. The extrinsic metadata, intrinsic metadata, or user-defined metadata, or any combination thereof are dynamically associated with the binary large object. At least one operation is performed on the binary large object, wherein the operation is determined by the associated extrinsic metadata, associated intrinsic metadata, or associated user-defined metadata.