Digital Forensics Dispatch

Digital Forensics and eDiscovery: Zoom Data

November 30, 2021

Recently, JDSUPRA published an article by Onna Technologies, Inc. about preserving Zoom meeting data. The article discusses what types of data are available and describes what data is included in each of the Zoom plans available. Most of the data mentioned seems to be related to those who have the Pro, Business or Enterprise plans for Zoom. There is, however, a lot of interesting data that could be available.

The paid Zoom plans offer capabilities such as recording of Zoom meetings, which could certainly be a useful feature and have relevant data. There is also data relating to screen sharing, file sharing, polling, in-meeting group chats, in-meeting private chats, meeting recordings (both audio and video), transcriptions, and Zoom chats (including 1-on-1, groups, and channels).  Many of the features mentioned are items that a Zoom administrator can enable or disable from their administrator account.

The article mentions some key information about the length of time that certain artifacts are retained for, “Zoom meeting recordings are only retained for 90 days by default and can only be surfaced and exported one at a time.” Zoom chats have some limitations for viewing the data and performing searches, “chat messages can only be searched by date range (up to 1 month at a time) and user, there is no context for chat messages listed in search results, and chat message downloads are limited to one conversation or all search results” the article states. Most of the data is stored in the cloud for the associated Zoom account, however there are options for local storage.

Email:    Phone: 703.359.0700
Digital Forensics/Cybersecurity/Information Technology
https://senseient.com/services/digital-forensics