An auditing system and method for analyzing email, including capturing email transferred over a network and transferring the email to a data analyzer. The email can be encrypted for safe transfer to the analysis location. Once the email is delivered to the analysis location, it is decrypted and the analysis process begins. The analysis of the email includes scanning the email for specific search terms found in a lexicon and then identifying trends based on scanning results.
1. A method comprising:
receiving, at a data analyzer, captured content over a network, the captured content comprising documents including potential attorney client protected information, personal information, custom information or confidential information;
analyzing the captured content including:
scanning the captured content for a set of keywords, phrases or expressions that are associated with potential attorney client protected information, personal information, custom information or confidential information, and
recording information about hits that are determined based on the scanning, wherein recording further includes storing information that describes the hits;
determining the nature of protected, personal, custom or confidential information in the documents including evaluating the recorded information, wherein the keywords, phrases or expressions are associated with respective categories and subcategories of information, and wherein determining the nature of the information in the documents comprises assigning to the documents the categories and subcategories of each of the hits in the documents that were determined based on the scanning; and
providing information about the nature and amount of protected, personal, custom or confidential information in the documents, wherein the information includes trend analysis based on a comparison of the number of hits associated with each of the categories and subcategories.
2. The method of claim 1 where receiving the captured content includes copying the captured content for analysis.
3. The method of claim 2 wherein receiving the captured content includes receiving a sampling of the captured content.
4. The method of claim 2 wherein receiving the captured content includes receiving a selected ratio of all the captured content.
5. The method of claim 2 further comprising encrypting the captured content and decrypting the encrypted content before analysis.
6. The method of claim 1 wherein the captured content is email, and wherein receiving the captured content includes receiving or retrieving email that has been stored on an email server.
7. The method of claim 6 wherein the captured content is email and receiving the captured content includes receiving a ratio of email that is stored in the email server.
8. The method of claim 6 wherein receiving the captured content includes receiving a ratio of email that is transferred over a network.
9. The method of claim 1 wherein the keywords, phrases or expressions include one or more terms and the method further comprising receiving terms that describe the custom information, using the received terms when scanning, wherein the custom information is product information, and wherein the determining and providing the nature of protected, personal, custom or confidential information in the documents includes determining and providing information about occurrences of product information in the documents.
10. The method of claim 9 wherein the product information is a product name or identifier.
11. The method of claim 1 wherein the personal information is protected health or financial information.
12. The method of claim 1 further comprising configuring a client based information transmission system based on the provided information.
13. The method of claim 1 wherein storing information includes storing a type of hit.
14. The method of claim 1 wherein scanning the captured content includes one or more of documents, messages, or emails.
15. The method of claim 1 wherein analyzing the captured content includes:
identifying one or more categories of the confidential information; and
storing the identified categories of confidential information without storing actual confidential information after locating a hit.
16. The method of claim 1 wherein:
the keywords, phrases or expressions have an associated mask, the mask being a filter used to include or exclude values from the keywords, phrases or expressions based on a predefined criteria; and
analyzing the captured content includes searching the content for both the keywords, phrases or expressions and the associated mask.
17. The method of claim 1 wherein the keywords, phrases or expressions form a search query.
18. The method of claim 1 wherein the keywords, phrases or expressions include one or more terms and the method further comprising receiving terms that describe the custom information, using the received terms when scanning, wherein the custom information is or relates to a trade secret, and wherein the determining and providing the nature of protected, personal, custom or confidential information in the documents includes determining and providing information about occurrences of trade secrets in the documents.
19. The method of claim 1 wherein scanning includes scanning attachments to the captured content.