How WinRAR Can Be Used In eDiscovery & Digital Forensics

Preventing corruption and accidental modification of data is imperative in the fields of eDiscovery and Forensics. Large data files containing evidence and other sensitive information need to be safely and securely stored.

WinRAR’s time-stamp options provide these industries with exactly what they need, and coupled with the encryption and recovery record capabilities, WinRAR is the best solution for those working in these fields.

Topics To Be Covered

  • A Brief Introduction To WinRAR
  • The Changing Face Of Digital Data
  • Maintaining Data Integrity
  • WinRAR Can Help You Maintain & Protect Data

A Brief Introduction To WinRAR

WinRAR is a data compression and archiving tool. It can compress data into smaller, more manageable archives saving space and making them easier to share online or via email. WinRAR also acts as a virtual filing cabinet, storing files in one place in easy to access archives.

WinRAR archives can be encrypted and password protected to secure them against accidental modification.

WinRAR was developed by Eugene Roshal (Roshal Archive), and with its initial release in 1995, it is the original data compression and extraction tool, used by over 500 million users worldwide.

WinRAR has a loyal following and is one of the most popular and trusted compression utilities on the Windows platform.

WinRAR is officially known as trialware, providing users with a 40-day trial period.

After the 40 days, a license must be purchased to continue using WinRAR.

The Changing Face Of Digital Data

The way that organisations share and store data, from servers to portable devices, to the cloud and increasingly the internet of things (IoT) is changing and becoming more decentralised all the time. This explosion of data presents significant risks, from fraud to data leaks.

It is important for the eDiscovery and Forensics sector to have easily accessible data and maintain the integrity of evidence.


eDiscovery – the collection, preservation, analysis and reporting of data. Concentrating mainly on active data that is easily available through file storage and other program managers that businesses or individuals utilise. This data is collected by the eDiscovery team and passed on to investigators to establish whether it has been tampered with or altered in any way.

Digital Forensics – when a deeper investigation into the data is required. A digital forensic specialist will search through data sets for hidden or deleted data.

Maintaining Data Integrity

It is of the highest importance that data collected by eDiscovery specialists and investigated by Digital Forensics remains protected and secure. Copies of files need to be made, ensuring that no alterations or modifications are made to the original source data.

Securing data with encryption is a useful tool for both sectors, as is time-stamping files to see who and when the data was last accessed. The ability to be able to recover lost or damaged files can be a very useful resource for this sector too.

eDiscovery & Digital Forensics deal with these types of data:

Active Data – data that tends to be regularly access, such as emails or files stored on local hard drives.

Cloud Data – the data that is collected and stored on cloud servers.

Mobile Data – data that is stored on portable devices such as laptops, tablets and smartphones.

Offline Data – data that is not accessed regularly, but still needs to be stored and preserved.

Back Up Data – portable hard drives, tape drives or disaster recovery systems that are designed to be easily restored in the event of a system crash or data breach.

Hidden Data – data that has been deleted or files that exist or numerous systems.

WinRAR Can Help You Maintain & Protect Data

WinRAR stores the exact time that a file or archive was created or modified. Time-stamping files/archives and giving further control to eDiscovery and Digital Forensic experts regarding when and who has accessed the relevant data sets.

WinRAR’s built-in back up option and its Lock Archive function assists in the prevention of accidental modification or deletion of files.

WinRAR can be used to set passwords for files and archives, which not only encrypts the names with 256-bit AES encryption, but also encrypts the metadata too, making it virtually impossible for the contents of files to be guessed at or intercepted. These archives and files can then be safely stored on devices and in the cloud. This is the ideal solution for those working in eDiscovery or Digital Forensics, assisting with maintaining the integrity of the data collected.

The ability to set up Administrator rights allows complete control over the data stored and collected, and more importantly, over who can access it. WinRAR’s built-in password manager is also a very useful addition to an already extensive arsenal, helping users to keep track of the numerous and difficult passwords required to keep sensitive data away from prying eyes.

The Recovery Record feature can help to restore damaged archives, and used along with existing anti-virus tools, WinRAR can scan files and archives for malicious content before the contents have been unpacked onto a computer or device.

WinRAR is one of the most popular and most trusted applications on the market. It is being constantly improved to keep up with the changing security environment that individuals and organisations alike must navigate.

With more than 25 years’ experience and a dedicated Sales & Support Team, WinRAR is the ultimate software for those working in eDiscovery & Digital Forensics.