Microsoft 365 高级电子数据展示概述Overview of Microsoft 365 Advanced eDiscovery

Microsoft 365 中的高级电子数据展示解决方案基于现有 Microsoft 电子数据展示和分析功能构建。The Advanced eDiscovery solution in Microsoft 365 builds on the existing Microsoft eDiscovery and analytics capabilities. 高级电子数据展示提供端到端工作流,以保留、收集、分析、审阅、分析和导出对组织内部和外部调查做出响应的内容。Advanced eDiscovery provides an end-to-end workflow to preserve, collect, analyze, review, analyze, and export content that's responsive to your organization's internal and external investigations. 它还允许法律团队管理整个法定保留通知工作流,以与案件涉及的保管人进行通信。It also lets legal teams manage the entire legal hold notification workflow to communicate with custodians involved in a case.

高级电子数据展示功能Advanced eDiscovery capabilities

高级电子数据展示可通过发现组织所存储的数据来帮助组织对法律事务或内部调查做出响应。Advanced eDiscovery can help your organization respond to legal matters or internal investigations by discovering data where it lives. 您可以通过识别感兴趣的人员及其数据源无缝管理电子数据展示工作流,无缝应用保留以保留数据,然后管理合法保留通信过程。You can seamlessly manage eDiscovery workflows by identifying persons of interest and their data sources, seamlessly apply holds to preserve data, and then manage the legal hold communication process. 通过从源收集数据,你可以搜索实时 Microsoft 365 平台以快速找到所需的内容。By collecting data from the source, you can search the live Microsoft 365 platform to quickly find what you need. 智能的机器学习功能(如深度索引、电子邮件线程和近重复检测)还有助于将大量的数据减少为相关的数据集。Intelligent, machine learning capabilities such as deep indexing, email threading, and near duplicate detection also help you reduce large volumes of data to a relevant data set.

以下各节介绍这些高级电子数据展示功能如何帮助你的组织。The following sections describe how these Advanced eDiscovery capabilities can help your organization.

高级电子数据展示功能

就地发现和收集数据Discover and collect data in-place

通常,依赖于多个第三方电子数据展示解决方案的组织需要从 Microsoft 365 复制大量数据以处理数据,并且必须承载重复数据。Traditionally, organizations that rely on multiple third-party eDiscovery solutions require copying large volumes of data out of Microsoft 365 to process and having to host duplicate data. 这一要求会增加查找相关数据的时间,以及管理多个解决方案的风险、成本和复杂性。This necessity increases the time to find relevant data and the risk, cost, and complexity of managing multiple solutions.

通过 Microsoft 365 中的高级电子数据展示,你可以发现源数据并一直位于 Microsoft 365 安全性和合规性边界内。Advanced eDiscovery in Microsoft 365 lets you discover data at the source and staying within your Microsoft 365 security and compliance boundary. 通过从实时系统就地收集数据,高级电子数据展示可以减少返回到源的接触,并减少查找缺少的内容的不必要工作,在传统电子数据展示解决方案中记录滞后时通常会发生此情况。By collecting data in-place from the live system, Advanced eDiscovery reduces the friction of going back to the source and reduces unnecessary work of having to find missing content, which often happens when journaling lags in traditional eDiscovery solutions.

Teams、Yammer、SharePoint Online、OneDrive for Business 和 Exchange Online 中数据的本机搜索和收集功能进一步增强了数据发现。Native search and collection capabilities for data in Teams, Yammer, SharePoint Online, OneDrive for Business, and Exchange Online further enhances data discovery. 例如,高级电子数据展示:For example, Advanced eDiscovery:

  • 重新构造 Teams 对话 (而不是从用户对话中返回) 。Reconstructs Teams conversations (instead of returning individual messages from conversations).

  • 收集使用电子邮件和 Teams 聊天中的链接或新式附件与用户共享的基于云的内容。Collects cloud-based content shared with users by use of links or modern attachments in email message and Teams chats.

  • 具有对数百种非 Microsoft 365 文件类型的内置支持。Has built-in support for hundreds of non-Microsoft 365 file types.

  • 从数据连接器导入 (Microsoft 365 中导入和存档的第三方源(如) 、Facebook、Slack 和 Zoom 会议) 收集数据Collects data from third-party sources (such as Bloomberg, Facebook, Slack, and Zoom Meetings) that's imported and archived in Microsoft 365 by data connectors.

在一个平台中管理电子数据展示工作流Manage eDiscovery workflow in one platform

高级电子数据展示可帮助你减少需要依赖的电子数据展示解决方案的数量。Advanced eDiscovery can help you reduce the number of eDiscovery solutions you need to rely on. 它提供了简化的端到端工作流,所有这些都发生在 Microsoft 365 中。It provides a streamlined, end-to-end workflow, all which occurs within Microsoft 365. 高级电子数据展示通过自动将唯一和共享数据源映射到感兴趣的人员 (称为保管人 ) , 以及提供对潜在相关信息的报告和分析,在收集这些数据进行分析和审阅之前,有助于减少识别和收集潜在相关信息源的接触。Advanced eDiscovery helps reduce the friction of identifying and collecting potential sources of relevant information by automatically mapping unique and shared data sources to the person of interest (known as a custodian), and by providing reporting and analytics on potentially relevant data prior to collecting it for analysis and review.

此外,Microsoft Graph API 还可以帮助您自动执行电子数据展示工作流,并扩展自定义解决方案的高级电子数据展示。Additionally, Microsoft Graph APIs can help you automate the eDiscovery workflow and extend Advanced eDiscovery for custom solutions.

智能剔除数据Cull data intelligently

高级电子数据展示中的智能机器学习功能可帮助你减少要查看的数据量。Intelligent, machine learning capabilities in Advanced eDiscovery help you reduce the amount of data to review. 这些智能功能可帮助你减少大量的数据并剔除到相关集合。These intelligent capabilities help you reduce and cull large volumes of data to a relevant set. 例如,内置审阅集查询通过标识几乎重复项来帮助仅筛选唯一内容。For example, a built-in review set query helps filter only for unique content by identifying near duplicates. 此功能可显著减少要审阅的数据量。This capability can substantially reduce the amount of data to review.

其他机器学习功能可以使用智能标记和技术辅助审阅工具(如相关性模块)进一步优化和识别数据。Additional machine learning capabilities can further refine and identify relevant data using smart tags and technology assisted review tools like the Relevance modules.

电子数据展示与电子数据展示参考模型保持一致Advanced eDiscovery alignment with the Electronic Discovery Reference Model

Microsoft 365 中高级电子数据展示的内置工作流与电子数据展示模型 EDRM (概述的电子数据展示) 。The built-in workflow of Advanced eDiscovery in Microsoft 365 aligns with the eDiscovery process outlined by the Electronic Discovery Reference Model (EDRM).

电子数据发现参考模型 (EDRM)

(图像源的 edrm.net。(Image source courtesy of edrm.net. 源图像在 Creative Commons Attribution 3.0 未ported License.) The source image was made available under Creative Commons Attribution 3.0 Unported License.)

高级电子数据展示在高级别上如何支持 EDRM 工作流:At a high level, here's how Advanced eDiscovery supports the EDRM workflow:

  • 标识。Identification. 在确定了调查感兴趣的潜在人员后,可以添加他们作为保管人 (也称为数据保管人,因为他们可能拥有与调查) 高级电子数据展示案例有关的信息。After you identify potential persons of interest in an investigation, you can add them as custodians (also called data custodians, because they may possess information that's relevant to the investigation) to an Advanced eDiscovery case. 将用户添加为保管人后,可轻松保留、收集和查看保管人文档。After users are added as custodians, it's easy to preserve, collect, and review custodian documents.

  • 保留。Preservation. 为了保留和保护与调查相关的数据,高级电子数据展示允许您对与案例保管人关联的数据源进行合法保留。To preserve and protect data that's relevant to an investigation, Advanced eDiscovery lets you place a legal hold on the data sources associated with the custodians in a case. 还可以将非安全数据放在保留状态。You can also place non-custodial data on hold. 高级电子数据展示还内置了通信工作流,因此你可以向保管人发送合法保留通知并跟踪其确认。Advanced eDiscovery also has a built-in communications workflow so you can send legal hold notifications to custodians and track their acknowledgments.

  • 集合。Collection. 标识 (并保留) 调查相关的数据源后,可以使用高级电子数据展示搜索中的内置搜索工具,从可能与案例相关的主要数据源 () 和非实时数据源(如果适用)中收集实时数据。After you identified (and preserved) the data sources relevant to the investigation, you can use the built-in search tool in Advanced eDiscovery search for and collect live data from the custodial data sources (and non-custodial data sources, if applicable) that may be relevant to the case.

  • 处理。Processing. 收集与案例相关的所有数据后,下一步是处理该数据以进一步查看和分析。After you've collected all data relevant to the case, the next step is process it for further review and analysis. 在高级电子数据展示中,你在收集阶段标识的就地数据将复制到 Azure 存储位置 (称为审阅集 ) , 它提供案例数据的静态视图。In Advanced eDiscovery, the in-place data that you identified in the collection phase is copied to an Azure Storage location (called a review set), which provides you with a static view of the case data.

  • 查看。Review. 将数据添加到审阅集后,您可以查看特定文档并运行其他查询,以将数据减少为与案例最相关的内容。After data has been added to a review set, you can view specific documents and run additional queries to reduce the data to what is most relevant to the case. 此外,还可以为特定文档添加批注和标记。Also, can annotate and tag specific documents.

  • 分析。Analysis. 高级电子数据展示提供了集成的分析工具,可帮助你进一步从你确定与调查不相关的审阅集剔除数据。Advanced eDiscovery provides integrated analytics tool that helps you further cull data from the review set that you determine isn't relevant to the investigation. 除了减少数据量外,高级电子数据展示还可以帮助您节省法律审阅成本,通过组织内容使审阅过程更加轻松和高效。In addition to reducing the volume of relevant data, Advance eDiscovery also helps you save legal review costs by letting you organize content to make the review process easier and more efficient.

  • 生产和****演示。Production and Presentation. 准备就绪后,可以从审阅集导出文档进行法律审阅。When you're ready, you can export documents from a review set for legal review. 您可以以本机格式或 EDRM 指定格式导出文档,以便它们可以导入到第三方审阅应用程序中。You can export documents in their native format or in an EDRM-specified format so they can be imported into third-party review applications.

订阅和许可Subscriptions and licensing

高级电子数据展示的许可需要相应的组织订阅和每用户许可。Licensing for Advanced eDiscovery requires the appropriate organization subscription and per-user licensing.

  • 组织订阅: 若要访问 Microsoft 365 合规中心中的高级电子数据展示,你的组织必须具有以下项之一:Organization subscription: To access Advanced eDiscovery in the Microsoft 365 compliance center, your organization must have one of the following:

    • Microsoft 365 E5 或 Office 365 E5 订阅Microsoft 365 E5 or Office 365 E5 subscription

    • 具有 E5 合规性附加设备的 Microsoft 365 E3 订阅Microsoft 365 E3 subscription with E5 Compliance add-on

    • 具有 E5 电子数据展示和审核加载项的 Microsoft 365 E3 订阅Microsoft 365 E3 subscription with E5 eDiscovery and Audit add-on

    如果你没有现有的 Microsoft 365 E5 计划,并且想要试用高级电子数据展示,可以将Microsoft 365添加到现有订阅或注册 Microsoft 365 E5 试用版。If you don't have an existing Microsoft 365 E5 plan and want to try Advanced eDiscovery, you can add Microsoft 365 to your existing subscription or sign up for a trial of Microsoft 365 E5.

  • 每用户许可: 若要在高级电子数据展示案例中将用户添加为保管人,必须为该用户分配以下许可证之一,具体取决于你的组织订阅:Per-user licensing: To add a user as a custodian in an Advance eDiscovery case, that user must be assigned one of the following licenses, depending on your organization subscription:

    • Microsoft 365:必须为用户分配 Microsoft 365 E5 许可证、E5 合规性附加许可证或 E5 电子数据展示和审核加载项许可证。Microsoft 365: Users must be assigned a Microsoft 365 E5 license, an E5 Compliance add-on license, or an E5 eDiscovery and Audit add-on license.

    • Office 365:必须为用户分配 Office 365 E5 许可证。Office 365: Users must be assigned an Office 365 E5 license.

    若要了解如何分配许可证,请参阅 向用户分配许可证For information about how to assign licenses, see Assign licenses to users.

备注

用户只需要 E5 许可证 (或相应的附加许可证) 作为保管人添加到高级电子数据展示案例。Users only need an E5 license (or the appropriate add-on license) to be added as custodians to an Advanced eDiscovery case. 使用高级电子数据展示来管理事例和审查事例数据的 IT 管理员、电子数据展示管理员、律师、律师或律师不需要 E5 或附加许可证。IT admins, eDiscovery managers, lawyers, paralegals, or investigators who use Advanced eDiscovery to manage cases and review case data don't need an E5 or add-on license.

高级电子数据展示入门Get started with Advanced eDiscovery

高级电子数据展示有两个快速而简单的入门步骤。There are two quick and easy steps to get started with Advanced eDiscovery.

高级电子数据展示工作流入门

步骤Steps 说明Description
设置高级电子数据展示Set up Advanced eDiscovery 在验证订阅和许可要求后,您可以分配权限并配置组织范围的设置以开始使用高级电子数据展示。After verifying the subscription and licensing requirements, you can assign permissions and configure organization-wide settings to get started using Advanced eDiscovery.
创建和管理事例Create and manage cases 创建案例以管理组织中所有法律和其他类型的调查的高级电子数据展示工作流。Create cases to manage the Advanced eDiscovery workflow for all legal and other types of investigations in your organization.

高级电子数据展示体系结构Advanced eDiscovery architecture

下面的高级电子数据展示体系结构图显示了单地理位置环境和多地理位置环境中端到端工作流,以及与 EDRM一致的端到端数据流。Here's an Advanced eDiscovery architecture diagram that shows the end-to-end workflow in a single-geo environment and in a multi-geo environment, and the end-to-end data flow that's aligned with the EDRM.

模型海报:Microsoft 365 中的高级电子数据展示体系结构Model poster: Advanced eDiscovery Architecture in Microsoft 365

以图像视图View as an image

下载为 PDF 文件Download as a PDF file

下载为 Visio 文件Download as a Visio file