Overview
This feature is in Walk, and supported in databases created after September 20, 2021.
DISCO offers search for many properties of emails, including the sender, recipients, domains, and many more. We recently added 4 new search fields to help you find potentially privileged communications and key email communications:
- domainCount: the unique count of email domains found within the from, to, cc, and bcc fields on email messages
- recipientCount: the unique count of email recipients in the to, cc, bcc fields on email messages
- participant: searches the from, to, cc, and bcc fields on email messages
- participantCount: the unique count of email participants in the from, to, cc, and bcc fields on email messages
Common Searches
Potentially Privileged Communications
- Law firm & client employees: domain(lawfirm.com & client.com) & domainCount(2)
- This search returns emails between a law firm and its client, and no other parties. Including domainCount(2) ensures only the 2 specified domains are on the emails.
- Internal communications with in-house counsel: participant(“Counsel@corp.com”) & domainCount(1)
- This returns emails with an in-house counsel and employees at the same company, and no other parties. Including domainCount(1) ensures only the 1 specified domain, corp.com, is on the emails.
- Identify domains that broke privilege: domain(firm.com & corp.com) & domainCount(>2)
- This returns emails between a law firm, its client, and any additional parties who would have broken privilege.
Properly collected email addresses and domain data are required for domain searching & analysis. If the collected and ingested emails only include email display names, such as Sara Smith, then it may preclude domain searches.
Communication Participants
- Search for emails with a small number of recipients: recipientCount(<5)
- This search returns emails with 4 or less recipients. This can help quickly remove broad communications or newsletters.
- Specific sender and recipient: from(“Harold@abc.com”) & recipient(“Jane@abc.com”) & recipientCount(1)
- This returns emails from Harold@abc.com to Jane@abc.com, and no other recipients. Including recipientCount(1) ensures the specified recipient is the only recipient.
- Emails between specific individuals: participants(“Harold@abc.com” & “Jane@abc.com”)
- This is a more generic search, returning emails where both Harold@abc.com and Jane@abc.com were on the emails. They could have been included as the from, to, cc, or bcc value.
- Emails between only specific individuals: participants(“Harold@abc.com” & “Jane@abc.com”) & participantCount(2)
- This is a more narrow search, returning emails where both Harold@abc.com and Jane@abc.com were on the emails, and no one else.
- All emails involving a specific individual: participant("Harold@abc.com")
- This simple search returns all emails on which Harold@abc.com was a participant.
- Emails to only specific individuals: recipients(“Bob@abc.com” & “Cera@abc.com” & “Daphne@abc.com”) & recipientCount(3)
- This returns emails where the 3 specified recipients were the only recipients.
Additional Searches
Internal communications
domainCount can be used to find communications within a single organization, using a search such as: domain(company.com) & domainCount(1).This returns emails with only the single specified domain.
Privileged communications with multiple parties
Privileged communications may be more complex when multiple parties involved, such as a client with 2 law firms representing them. In this case, DISCO can search for:
- Emails among the client and both law firms: domain(corp.com & firm1.com & firm2.com) & domainCount(3)
- Emails between the client and 1 of the law firms: domain(corp.com) & domain(firm1.com or firm2.com) & domainCount(2)
- Emails between the 2 law firms: domain(firm1.com & firm2.com) & domainCount(2)
Combining that into a single search will return emails that match any of the scenarios: domain(corp.com & firm1.com & firm2.com) & domainCount(3) OR domain(corp.com) & domain(firm1.com or firm2.com) & domainCount(2) OR domain(firm1.com & firm2.com) & domainCount(2)
Newsletters and mass communications
domainCount or recipientCount can help you quickly find broadly distributed emails or other mass communications.
- Emails across many individuals or organizations: domainCount(>10)
- Potential spam or newsletter emails with many recipients: recipientCount(>25)