E-Discovery Processing Workflows Explained – What Is De-NISTing?

De-NISTing is the standard eDiscovery practice of removing system files, and other non-user generated ESI from a dataset during the data processing stage. NIST refers to the acronym of National Institute of Standards and Technology.

What is the Goal of De-NISTing?

The goal of De-NISTing is to remove ESI that is unlikely to contain relevant information, and in turn reduce the size of dataset and overall cost of hosting and reviewing the dataset. De-NISTing occurs in the processing stage of the EDRM following data collection and prior to document review.

Determining What Datasets are Processed

To determine which files are generic system files, datasets are processed with De-NISTing workflows that utilize The National Software Reference Library (NSRL). The NSRL is a database comprised of numerous datasets that represent the “digital signature” of various known and traceable applications based on their standard system and application files.

These digital signatures are used to determine which files are non-user generated, so they can be removed from the data set to reduce the total size of the data population. NIST is constantly evaluating and updating their database as new data sources emerge.

The RDS (Reference Data Set)

The NIST.gov website for the NSRL describes the use of this database by saying “The RDS (Reference Data Set) can be used by law enforcement, government, and industry organizations to review files on a computer by matching file profiles in the RDS. This will help alleviate much of the effort involved in determining which files are important as evidence on computers or file systems that have been seized as part of criminal investigations”.

data processing and culling

De-NISTing is a common eDiscovery workflow that should be standard to most, if not all, data processing and culling processes. De-NISTing is commonly combined with de-duplication workflows to dramatically reduce the number of files to be reviewed.

Benefits of De-NISTing

TERIS’ eDiscovery processing and analytic workflows are proven to reduce review populations by an average of 30-40% more than traditional data culling and filtering methods. Our workflows are proven to reduce legal spend through defensibly reducing the amount of data to be reviewed by attorneys.

  • Defensibly reduces the amount of ESI to be hosted, reviewed, and therefore produced
  • Increased searchability through reducing data population and removing un-wanted files
  • Master software application list managed, authenticated, and maintained by NIST
  • Relativity easy to implement into existing workflows
  • De-NISTing workflows are built-into many existing data processing platforms

Reach out today to learn more about our eDiscovery and ESI processing solutions.

Subscribe to our Newsletter

Stay on top of the latest eDiscovery news

Name(Required)