Abstract: Methods and apparatus for collecting electronically stored information are disclosed. In general, a processor images an electronic device to collect metadata associated with a plurality of files stored on the electronic device. For example, the metadata may include file names, file sizes dates, etc. The processor then receives selection information associated with the metadata, the selection information being indicative of a subset of the plurality of files. The processor then installs an electronically stored information (ESI) collection application (e.g., remotely via a network and/or via a thumb drive exclusively in RAM) in the first electronic device (e.g., a device running one of several different operating systems) in response to a selection of a collection initiation trigger (e.g., selection of a hyperlink or virtual button). The processor then collects the ESI. For example, the processor may collect the ESI from a hard disk or solid state drive using a collection wizard user interface.