eDiscovery
๐ What is eDiscovery (in Microsoft 365)?
In Microsoft 365, eDiscovery is a set of tools that helps you search, preserve, and export content from across Microsoft services like:
Outlook (email)
Teams
OneDrive
SharePoint
Exchange mailboxes
Yammer conversations
It's especially useful for legal investigations, HR inquiries, or compliance audits.
๐ ️ Types of eDiscovery in Microsoft 365:
1. Content Search (basic level):
Quickly search for emails, documents, chats, etc.
Not part of a legal case; used more for internal review or admin tasks.
2. Core eDiscovery:
Lets you create cases, assign case members, search for content, place legal holds, and export results.
Useful for ongoing investigations or legal requests.
3. Advanced eDiscovery:
Adds machine learning, analytics, and filtering.
Can reduce data volume and highlight relevant content.
Great for bigger or more complex legal cases.
Requires Microsoft 365 E5 (or equivalent add-ons).
๐ก️ Key Features:
Legal Hold: Freeze content so it can’t be deleted or altered—crucial during lawsuits.
Search Query Builder: Filter by keyword, sender, date range, etc.
Export Options: Download results for lawyers or investigators.
Audit Trail: Keeps track of who searched or accessed what.
๐ง Real-World Example:
Imagine HR needs to investigate a harassment claim:
They create an eDiscovery case.
Put involved employees’ mailboxes on hold.
Search all messages and files between them.
Export results for legal review.