Manage legal investigations in Microsoft 365
Organizations have many reasons to respond to a legal case involving certain executives or other employees in your organization. This might involve quickly finding and retaining for further investigation-specific information in email, documents, instant messaging conversations, and other content locations used by people in their day-to-day work tasks. You can perform these and many other similar activities by using the eDiscovery case tools in the security and compliance center.
Want to know how Microsoft manages its eDiscovery investigations? Here's a technical white paper you can download that explains how we use the same search and investigation tools to manage our internal eDiscovery workflow.
Manage legal investigations with eDiscovery cases
eDiscovery cases let you control who can create, access, and manage eDiscovery cases in your organization. Use cases to add members and control what types of actions they can perform, place a hold on content locations relevant to a legal case, and use the Content Search tool to search the locations on hold for content that might be responsive to your case. Then you can also export and download those results for further investigation by external reviewers.
Manage your eDiscovery workflow by creating and using eDiscovery cases for every legal investigation your organization has to undertake
Assign eDiscovery permissions to control who can create and manage eDiscovery cases in your organization
Set up compliance boundaries to control the user content locations that eDiscovery managers can search
Search for content in your organization
Use scripts for advanced scenarios
Like the previous section that listed scripts for content search scenarios, we've also created some Security & Compliance Center PowerShell scripts to help you manage eDiscovery cases.
Create a eDiscovery hold report that contains information about all holds associated with eDiscovery cases in your organization
Add mailboxes and OneDrive locations for a list of users to an eDiscovery hold
Manage legal investigations with the Advanced eDiscovery solution in Microsoft 365
The Advanced eDiscovery solution in Microsoft 365 builds on the existing eDiscovery and analytics capabilities in Office 365. This new solution, called Advanced eDiscovery, provides an end-to-end workflow to preserve, collect, review, analyze, and export content that's responsive to your organization's internal and external investigations. It also lets legal teams manage the entire legal hold notification workflow to communicate with custodians involved in a case.
Advanced eDiscovery requires an E5 subscription for your Microsoft 365 or Office 365 organization. For more information about licensing, see Get started with Advanced eDiscovery.
Here's a quick overview of the built-in workflow in Advanced eDiscovery. For more information, see Explore the Advanced eDiscovery workflow.
Create a case to get started
Manage custodians by adding them to a case and placing a legal hold on content in their mailbox, OneDrive account, and Microsoft Teams they're members of
Manage communications with custodians by automating the legal hold notification process
Index custodian data and fix indexing errors so you can effectively collect data for your investigations
Analyze case data with advanced analytics tools
Export case data for review by outside counsel
Manage long-running jobs in Advanced eDiscovery