# L621 Collection/Recovery

**IRI:** https://folio.openlegalstandard.org/RzBukPsKWTommbx5e6_KLPg

## Labels

**Preferred Label:** L621 Collection/Recovery

## Definition

Activities and actions related to the collection and/or recovery of a) custodial email residing on the network, server, home share or enterprise archive or journal, hard-drives and removable media, as well as paper files, b) collection and/or recovery of non-custodial data the network, server, group shares, removable media and paper files, and c) decrypting files, cracking passwords, files restoration and other forensic analysis activity. Includes selective collection, searches and source imaging.

## Sub Class Of

- https://folio.openlegalstandard.org/RNkhUYPhiQvGHbAYwX9XKIg

**Deprecated:** False