Patent ID: 7984175

Claim:
An apparatus comprising: an object assembly module to reconstruct flows representing objects being transmitted on a network from packets, the packets associated with a document that includes the objects, wherein the document is captured based on a capture rule that specifies the objects, and wherein a determination is made as to whether to discard or to store the objects of the document; an object classification module to determine a type of content of the objects and to reconstruct the objects from the flows; an object store module to store the objects, wherein a location for storing the objects is determined based at least in part on the type of content for each of the objects, wherein the object store module comprises a content store to store the objects and a tag store to index the objects stored in the object store; and a user interface to enable a user to search objects stored in the object store module, wherein the objects are searched based on a query, which includes search criteria used to identify selected objects that match the search criteria, wherein a particular search is scheduled for a recurring time interval and includes a particular search query with selected terms, and wherein certain results of the particular search trigger an alarm in a form of an e-mail message to be sent to an administrator.