Method and System for Analyzing Data Related to an Event

Abstract

A system and method for analyzing data from a plurality of computer environments. A user may search for computer environments that meet a certain criterion. The computer environments are authenticated and data is copied from the computer environments to a memory location. The data may be marked so that a user may determine which computer environment provided the data. The user may add notations to the data during a review. Changes to data on the computer environments may be provided to a user using a syndication feed.

1 . A method of analyzing data related to an event comprising:
 (a) copying a plurality of files from a plurality of storage devices to a memory location;   (b) converting the plurality of files to a predetermined unified format;   (c) analyzing the plurality of files; and   (d) providing a report to a user based on the analysis.   
     
     
         2 . The method of  claim 1  wherein analyzing the data comprises sorting the data using a variable. 
     
     
         3 . The method of  claim 1  wherein the event is a user request. 
     
     
         4 . The method of  claim 1  wherein the event is a response to an incident. 
     
     
         5 . The method of  claim 1  wherein analyzing the data comprises sorting the data into data groups based on one or more variables. 
     
     
         6 . The method of  claim 5  comprising comparing the data groups and providing a report to the user showing the union of two groups. 
     
     
         7 . The method of  claim 5  comprising comparing the data groups and providing a report to the user showing the intersection of two groups. 
     
     
         8 . The method of  claim 5  comprising comparing the data groups and providing a report to the user showing the difference between two groups. 
     
     
         9 . The method of  claim 5  comprising comparing the data groups and providing a report to the user showing the similarities between two groups. 
     
     
         10 . The method of  claim 1  wherein the report comprises a list of the plurality of files. 
     
     
         11 - 65 . (canceled)