---
sourceDocument: Australia Employee Service Management
sourceDocumentLink: https://www.servicenow.com/docs/r/pt-BR/employee-service-management

 Release :

    - australia

ft:locale :

    - pt-BR

ft:publication_title :

    - Australia Employee Service Management

ft:clusterId :

    - emplsm

bundleId :

    - emplsm

workflow :

    - Employee


---

# Explore

# Exploring Legal Digital Forensics {#ariaid-title1}

* Versão de lançamento: Australia
* 
* Atualizado 12 de mar. de 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 min. de leitura

Legal Digital Forensics enables different departments in your
organization to submit legal requests for discovery and processing of digital data of employees
suspected of malicious activity or litigation.

## Features {#legal-digital-forensics-overview__section_hbr_p2n_nnb}

* Intake form to gather request background, custodial and non-custodial data sources with keywords and filter dates.
* Flagging of e-discovery data sources with instructions for data processing.
* Integrated privacy approval flow to get the required approvals before starting the investigation.
* Pre-defined standard digital forensic tasks using a template.
* Record and audit trail of all activities done in support of the investigation and litigation.
{#legal-digital-forensics-overview__ul_rxb_q2n_nnb} You can submit a digital forensics request for the following actions for custodial and non-custodial data on the specified data sources:

* Preserve: Option for preserving relevant digital information of custodial and non-custodial data and documenting the facts.
* Collect: Option for collecting digital information of custodial and non-custodial data that may be relevant to the investigation. Collection might involve activities such as imaging storage devices, or copying or printing of the digital information.
* Review: Option for an in-depth, systematic search of facts in the collected information related to the investigation.
* Present: Option for presenting the relevant information of custodial and non-custodial data in an appropriate format to stakeholders.
{#legal-digital-forensics-overview__ul_tqz_jtn_nnb}After the required privacy approvals for investigation, the digital forensics team member working on the digital forensic request can promote it to a legal matter. The legal matter for the digital forensics request can have phases based on the requested actions. Each phase can have tasks for each custodial or non-custodial data for a keyword, data source, and date range.
Figura 1. Legal Digital Forensics workflow