The first three are straight forward, but the Near one I assume is like what I learned (thirty years ago, geesh) would be w/3 to say one work within three, but near isn't explicit for how much to search.Īnd then there are the research, to, participants fields. I hope this article was helpful for you? Thank you for taking the time to read this article.įrustratingly there is little documentation I can find for doing Boolean searches in eDiscovery.Īccording to documentation they list AND, OR, NOT and NEAR Sure this wasn't super exciting, but I still wanted to share this information with you. At the bottom click on "Review sample".īingo! We see a list of emails, and in the first email we already see our keyword. If the status is "Completed", click on your search and you will get a "Summary". Then click on "next".ĭepending on the size of the organization and the number of objects that need to be examined, it can take a very long time until the status "Completed" is reached. I like to start very general to get an overview, narrowing can be done later. If you want you can work with conditions to limit this search. The goal is to find emails that contain this word. Then click on "next".įor keyword I use as search term "Testversion". This selection depends very much on your search. Navigate to "Searches" and click on "New search". We have now only created the "container" but not configured anything yet. In the "Compliance Center", navigate to eDiscovery and select "Core".Įnter a name and if you want a description and click "save". Click on "edit".įind the user and click on "add" and then on "done". Thus, this person only gets access to this one eDiscovery case. In a Productive environment, you can assign a person the role of "eDiscovery Manager" in an eDiscovery case (we'll get to that in a moment). This is not necessarily following the concept of "working with the least privileges" (but absolutely OK for this demo). For this demo, I added my account to the "eDiscovery Administrator". Navigate down and you will see "eDiscovery Manager" and "eDiscovery Administrator". This will give you the details of this Role Group. Search for eDiscovery Manager and click on this Role Group. In the "Compliance Center" category, click "Roles". In order to work with eDiscovery we need the necessary permissions. On the left side click on "Show All" (if not everything is displayed) and select the Complicane Center. We start our investigation in the Microsoft 365 Admin Center. How this is done exactly, I will explain in the next steps. To clarify this, I created a content search with eDiscovery. In my case I had to clarify the question, would emails with certain words be sent or received. Please have a look at the following link: In order to work with the tool, you need the necessary licenses. Before we start, a quick word about licenses. This article is about the eDiscovery (content search) tool in Microsoft 365.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |