Part of running a leak investigation involves submitting an original source for the file or message that you're investigating. If the original file or message was shared long ago, or your organization is large, you probably won't be able to quickly find the original using EchoMark's Leak investigation dialog. It's for this reason that we provide an option to upload the original instead.
Leverage existing Search tools
Using the Upload option (see banner at the bottom of the Original message picker dialog below) enables you to leverage your existing search tools to recover the original .eml file. You can either use your email client to find the original or you can leverage eDiscovery tools as an Admin to find the file you're looking for.
Use the links below to learn how to use eDiscovery tools for your email provider:
You don't need the exact original
Even if you don't have the exact original, if you have a part of the email chain that the original belongs to, you can submit any of those messages as an original and we'll determine the true original buried in that chain.
Original Message picker