Manage legal investigations in Office 365

Organizations have many reasons to respond to a legal case involving certain executives or other employees in your organization. This might involve quickly finding and retaining for further investigation-specific information in email, documents, instant messaging conversations, and other content locations used by people in their day-to-day work tasks. You can perform these and many other similar activities by using the eDiscovery case tools in the security and compliance center.

Want to know how Microsoft manages its eDiscovery investigations? Here's a technical white paper you can download that explains how we use the same Office 365 search and investigation tools to manage our internal eDiscovery workflow.

eDiscovery cases let you control who can create, access, and manage eDiscovery cases in your organization. Use cases to add members and control what types of actions they can perform, place a hold on content locations relevant to a legal case, and use the Content Search tool to search the locations on hold for content that might be responsive to your case. Then you can also export and download those results for further investigation by external reviewers.

Use scripts for advanced scenarios

Like the previous section that listed scripts for content search scenarios, we've also created some Security & Compliance Center PowerShell scripts to help you manage eDiscovery cases.

The Advanced eDiscovery solution in Microsoft 365 builds on the existing eDiscovery and analytics capabilities in Office 365. This new solution, called Advanced eDiscovery, provides an end-to-end workflow to preserve, collect, review, analyze, and export content that's responsive to your organization's internal and external investigations. It also lets legal teams manage the entire legal hold notification workflow to communicate with custodians involved in a case.

Advanced eDiscovery requires an E5 subscription for your Office 365 or Microsoft 365 organization. Alternatively, users with an E3 license require the Advanced Compliance add-on subscription so you can manage them as custodians in an Advanced eDiscovery case.

Here's a quick overview of the built-in workflow in Advanced eDiscovery. For more information, see Overview of the Advanced eDiscovery solution in Microsoft 365.