±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 34077
New Yesterday: 0 Visitors: 159

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

RSS Feed Widget

±Latest Webinars

Collecting Data from Microsoft Sharepoint

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts

Collecting Data from Microsoft Sharepoint

Post Posted: Thu Feb 06, 2014 4:30 am

Hello Forensic Forum Members

I wanted to inquire on programs to Forensically collect data from Microsoft Sharepoint.

I did some searching on this forum and noticed quite a few older threads in regards to collecting data from Sharepoint.

I understand they have tools from X1 Discovery, Kroll OnTrack and Titan Collector for Sharepoint. I have inquired with all these company's for a demo and pricing.

I am curious to find out from the experts on this forum if anyone had any real world experience using any of these tools.

Please let me know if you have used any of these above or if you used something else. Was the tool user friendly? Was the data collected in a matter as you expected it to be?

I'm sure all these companies claim their program is the best so I want to hear all the nitty gritty about any experience you've had with them.

Thank you in advance for your help.  

Senior Member

Re: Collecting Data from Microsoft Sharepoint

Post Posted: Tue Mar 04, 2014 6:03 am

NUIX have a sharepoint collection tool (NUIX sharepoint collector)

I've not used it or seen it but generally NUIX produce quality software...at a price Wink  

Senior Member

Re: Collecting Data from Microsoft Sharepoint

Post Posted: Tue Mar 04, 2014 6:35 pm

I like the Sharepoint collector from PinPoint. It works very well.

Senior Member

Re: Collecting Data from Microsoft Sharepoint

Post Posted: Wed Mar 05, 2014 12:29 pm

Forensic collection from SharePoint - not sure exactly what you mean but as others here are ignoring the disk imaging options I'll do the same.

Sherpa Software's Discovery Attender for Exchange (don't let the title fool you) has a SharePoint Connector that I've used. I've always found it real easy to create the documentation using DAE, gives you everything you need i.e. who searched for what from where and when, and what they did with it (e.g. exported to specific destination). And the log files support the documentation



Senior Member

Re: Collecting Data from Microsoft Sharepoint

Post Posted: Wed Jun 18, 2014 12:45 pm

F-Response also includes the ability to connect to a SharePoint site. You just need the database creds and either the IP address or server name. You can then mount the databases as read-only folders locally and collect with FTK Imager, EnCase, or whatever you use. It also puts the .aspx file in so you can get a view of each page. I like it a lot and would highly recommend checking it out. If you are unable to connect to the site for some reason, just contact the tech support and they are pretty good about working with you to debug any crashes. I don't think it is able to collect from SharePoint '03 though for some reason but I may be mistaken.

Also as a side note, Titan collector got bought out and is now the NUIX collector. Awesome tool in my opinion outside of the fact that you can only save to a mfs01 file.  


Page 1 of 1