Description:  Unless the corporation captures or monitors instant messaging (IM) traffic with an enterprise system, there may by little or no organized records of IM conversations. IM logs and saved sessions may be found on the local machine or other user temp directories. IM conversations can be multiparty and not have a direct user to screen name correlation. This can raise the time and cost in discovery.