在高級電子檔探索中查看交談Review conversations in Advanced eDiscovery

立即訊息是一種簡單的方法,可讓您在大型物件中提問、分享想法或快速交流。Instant messaging is a convenient way to ask questions, share ideas, or quickly communicate across large audiences. 當立即訊息平臺(如 Microsoft 小組)成為企業共同作業的核心時,組織必須評估其 eDiscovery 工作流程如何處理這些新的通訊和共同作業形式。As instant messaging platforms, like Microsoft Teams, become core to enterprise collaboration, organizations must evaluate how their eDiscovery workflow addresses these new forms of communication and collaboration.

「高級 eDiscovery」中的交談重建功能是專門設計來協助您識別內容內容,並產生獨特的交談視圖。The Conversation Reconstruction feature in Advanced eDiscovery is designed to help you identify contextual content and produce distinct conversation views. 這項功能可讓您有效且快速地查看完整的立即訊息交談 (也稱為「) 組織」等平臺中所產生的「 執行緒交談 」。This capability allows you to efficiently and rapidly review complete instant message conversations (also called threaded conversations) that are generated in platforms like Microsoft Teams.

透過交談重建,您可以使用內建的功能來重新建立、審閱及匯出執行緒交談。With Conversation Reconstruction, you can use built-in capabilities to reconstruct, review, and export threaded conversations. 使用高級 eDiscovery 交談重構來:Use Advanced eDiscovery Conversation Reconstruction to:

  • 在交談內保留所有郵件的唯一郵件層級中繼資料。Preserve unique message-level metadata across all messages within a conversation.

  • 收集搜尋結果周圍的上下文相關訊息。Collect contextual messages around your search results.

  • 審閱、批註和密文討論執行緒的交談。Review, annotate, and redact threaded conversations.

  • 匯出個別的郵件或串接的交談Export individual messages or threaded conversations

術語Terminology

以下是很少的定義,可協助您開始使用交談重建。Here are few definitions to help you get start using Conversation Reconstruction.

  • 訊息: 代表交談的最小單位。Messages: Represent the smallest unit of a conversation. 郵件大小、結構及中繼資料可能會有所不同。Messages may vary in size, structure, and metadata.

  • 交談: 代表一或多個郵件的群組。Conversation: Represents a grouping of one or more messages. 在不同的應用程式中,交談可能以不同的方式呈現。Across different applications, conversations may be represented in different ways. 在某些應用程式中,會有明確的動作,可回復現有的郵件。In some applications, there is an explicit action that results from replying to an existing message. 交談是以此使用者動作的結果來明確地組成。Conversations are formed explicitly as a result of this user action. 例如,以下是 Microsoft 小組中的頻道交談的螢幕擷取畫面。For example, here is a screenshot of a channel conversation in Microsoft Teams.

    Microsoft 小組通道交談

    在其他應用程式中 (例如,小組中的1xN 聊天室訊息) ,沒有正式的回復鏈,而且郵件會顯示為單一線程中的「平面河郵件」。In other apps (such as 1xN chat messages in Teams), there is not a formal reply chain and instead messages appear as a "flat river of messages" within a single thread. 在這些類型的應用程式中,對話會從一段時間內發生的一組訊息中推斷出。In these types apps, conversations are inferred from a group of messages that occur within a certain time. 「軟群組」郵件的 (相對於回復鏈) 代表相關主題的「前後」交談。This "soft-grouping" of messages (as opposed to a reply chain) represent the "back and forth" conversation about a specific topic of interest.

在您識別相關的保管人和內容位置之後,您可以建立搜尋來尋找潛在的相關內容。After you have identified relevant custodians and content locations, you can create a search to find potentially relevant content. 在 [高級 eDiscovery] 案例的 [ 搜尋 ] 索引標籤上,您可以按一下 [ 新增搜尋 ] 並依照嚮導來建立搜尋。On the Searches tab in the Advanced eDiscovery case, you can create a search by clicking New search and following the wizard. 如需如何建立搜尋、建立搜尋查詢及查看搜尋結果的詳細資訊,請參閱 收集案例的資料For information about how you can create a search, build a search query, and view the search results, see Collect data for a case.

步驟2:建立交談複查集Step 2: Create a conversation review set

在審閱集中,您可以搜尋、標記、批註和密文檔、電子郵件訊息和聊天交談。In a review set, you can search, tag, annotate, and redact documents, email messages, and chat conversations. 在 [Advanced eDiscovery] 中,您可以根據個別郵件或串接交談,自訂您的交談評論。In Advanced eDiscovery, you can customize your review of conversations, based in individual messages or threaded conversations. 這取決於您將在步驟1中建立之搜尋結果的結果新增至中的審查集類型。This is determined by the type of review set that you add the results of the search created in Step 1 to. 有兩種不同的審閱集類型:There are two different types of review sets:

  • 標準檢查集合: 交談中的郵件會經過處理並顯示為個別的專案。Standard review sets: Messages in conversations are processed and displayed as individual items.

  • 交談複查集: 交談中的郵件會個別處理,但會顯示在交談視圖中。Conversation review sets: Messages in conversations are processed individually but displayed in a conversation view. 在交談複查集中,您可以線上程交談模式中批註、標記和密文顯示郵件。In a conversation review set, you can annotate, tag, and redact messages in a threaded conversation view.

如需如何查看及管理審閱集中內容的詳細資訊,請參閱 管理審閱集For more information about how to review and manage content in a review set, see Manage review sets.

步驟3:啟用交談檢索選項Step 3: Enable conversation retrieval options

在您檢查並完成搜尋查詢之後,您可以將搜尋結果新增至審閱集。After you have reviewed and finalized your search query, you can add the search results to a review set. 當您將搜尋結果新增至審閱集時,原始資料會複製到 Azure 儲存體區域,以協助檢查和分析程式。When you add your search results into a review set, the original data is copied to an Azure Storage area to facilitate the review and analysis process. 如需將搜尋結果新增至審閱集合的詳細資訊,請參閱 將搜尋結果新增至審閱集For more information about adding search results to a review set, see Add search results to a review set.

當您將資料從交談新增至審閱集時,您可以使用交談檢索選項來展開搜尋並包含內容相關訊息。When you add data from conversations to a review set, you can use the conversation retrieval options to expand your search and include contextual messages. 在您設定交談檢索選項後,可能會發生下列情況:After you set the conversation retrieval options, the following things can happen:

交談檢索

  1. 搜尋會使用關鍵字和日期範圍查詢,傳回 郵件 3上的命中。Using a keyword and date range query, the search returned a hit on Message 3. 此郵件屬於較大的交談,如 CRC1所示。This message was part of a larger conversation, illustrated by CRC1.

  2. 當您將資料新增至複查集並啟用交談檢索選項時,高級 eDiscovery 會傳回並收集 CRC1中的其他專案。When you add the data into a review set and enable the conversation retrieval options, Advanced eDiscovery will go back and collect other items in CRC1.

  3. 將專案新增至審閱集合之後,您可以從 CRC1審閱所有的個別郵件。After the items have been added to the review set, you can review all the individual messages from CRC1.

啟用交談檢索:To enable conversation retrieval:

  1. 在 [高級 eDiscovery] 案例中的 [ 搜尋 ] 索引標籤上,選取搜尋,然後按一下彈出頁面上的 [ 新增至審閱集 ]。On the Searches tab in the Advanced eDiscovery case, select a search, and then click Add to review set on the flyout page.

  2. 選取現有的複查集或建立一個複查集。Select an existing review set or create a review set. 將搜尋結果新增至標準或交談複查集時,您可以設定檢索選項。You can configure retrieval options when adding search results to a standard or a conversation review set.

  3. 在 [ 集合選項] 底下,針對您想要展開的搜尋內容來源,設定其交談檢索選項,然後按一下 [ 新增 ] 以啟動程式。Under Collection options, configure the conversation retrieval options for the content sources that you want to expand in your search, and then click Add to start the process.

  4. 在 [工作] 索引標籤上的 [新增至審閱集] 工作完成之後,您就可以開始查看交談。After the Add to review set job on the Jobs tab has finished, you can start reviewing the conversations.

步驟4:在審閱集中複查及匯出對話Step 4: Review and export conversations in a review set

在處理內容並將其新增至審閱集合之後,您可以開始查看審閱集中的資料。After the content has been processed and added to the review set, you can start reviewing the data in the review set. 檢查功能會因內容是否已新增至標準審閱集或交談複查集而有所不同。The review capabilities are different depending on whether the content was added to a standard review set or a conversation review set.

在標準複查集中檢查交談Reviewing conversations in a standard review set

在標準的審閱集中,郵件會以個別專案的方式處理及顯示,類似于如何儲存在信箱資料夾中。In a standard review set, messages are processed and displayed as individual items, similar to how they're stored in a mailbox folder. 在此工作流程中,會以個別的專案處理每封郵件。In this workflow, each message is processed as a separate item. 因此,標準的審閱集中無法使用「串接摘要」和「匯出」選項。As a result, the threaded summary and export options aren't available in a standard review set.

標準複查集

在交談評審集中檢查交談Reviewing conversations in a conversation review set

在交談複查集中,個別郵件會串接在一起,並以交談方式呈現。In a conversation review set, individual messages are threaded together and presented as conversations. 這可讓您複查及匯出內容交談。This lets you review and export contextual conversations.

交談複查集

下列各節說明如何在交談複查集中複查和匯出對話。The following sections describe reviewing and exporting conversations in a conversation review set.

審閱交談Reviewing conversations

在交談複查集中,您可以使用下列選項來協助審閱程式。In a conversation review set, you can use the following options to facilitate the review process.

  • 依交談群組: 將相同交談中的郵件分組,以協助使用者簡化及加速其審閱程式。Group by conversation: Groups messages within the same conversation together to help users simplify and expedite their review process.

  • 摘要視圖: 顯示「執行緒交談」。Summary view: Displays the threaded conversation. 在此視圖中,您可以看見整個交談,也可以存取每個個別郵件的中繼資料。In this view, you can see the entire conversation and also access the metadata for each individual message.

    • 查看個別郵件的中繼資料View metadata for individual messages

    • 下載個別郵件Download individual messages

  • 文字視圖: 會提供整個交談的解壓縮文字。Text view: Provides the extracted text for the entire conversation.

  • 批註視圖: 可讓您標記交談的執行緒化視圖。Annotate view: Lets you markup a threaded view of the conversation. 交談中的所有郵件都會共用相同的註釋檔。All messages in the conversation share the same annotated document.

  • 標記: 在審閱集中查看交談時,您可以按一下 [編碼] 面板中的 [ 標記] 面板 ,以查看及套用標記。Tagging: When viewing conversations in a review set, you can view and apply tags by clicking Tagging panel in the Coding panel.

  • 重新執行交談轉換: 當郵件新增至交談複查集時,會自動執行轉換工作以建立執行緒摘要及批註視圖。Rerun conversation conversion: When messages are added to a conversation review set, a conversion job is automatically run to create the threaded summary and annotate views. 如果交談重建工作失敗,您可以按一下 [動作] 以執行 [複查] 集中的 [ 動作] > 建立交談 pdf ,以重新執行此工作。If the Conversation Reconstruction job fails, you can rerun this job by clicking Action > Create conversation PDFs in the review set.

匯出對話Exporting conversations

在交談複查集中,您可以設定下列選項來匯出對話:In a conversation review set, you can set the following options to export conversations:

匯出對話的選項

a.a. 中繼資料選項Metadata options

  • 載入檔案: 每個個別的郵件、電子郵件及檔都包含中繼資料。Load file: Metadata is included for each individual message, email, and document. 交談中的每一封郵件都有一個資料列。There is one row for each message in a conversation.

  • 標記: 您的審閱程式中的標記會包含在中繼資料檔案中。Tags: Tags from your review process are included in the metadata file. 交談中的郵件共用相同的標記。Messages in a conversation share the same tags.

b.b. 交談選項Conversation options

  • 交談檔案: 當您匯出對話檔時,批註的視圖會轉換為 PDF 檔案,並下載至匯出資料夾。Conversation files: When you export conversation files, the annotated view is converted to a PDF file and downloaded to the export folder. 一個交談檔案中的郵件指向相同交談檔案的 PDF 版本。Messages in one conversation file point to the PDF version of the same conversation file.

  • 個別聊天訊息: 當您匯出個別郵件時,交談中的每個唯一郵件都會匯出為獨立的專案。Individual chat messages: When you export individual messages, each unique message in the conversation is exported as a standalone item. 檔會以儲存為信箱的相同格式匯出。The file is exported in the same format that it was saved as in the mailbox. 針對特定交談,您會收到多個 .msg 檔案。For a specific conversation, you receive multiple .msg files.

    注意

    如果您已將批註套用至交談檔案,這些批註將不會轉移到個別的郵件。If you applied annotations to the conversation file, these annotations won't be transferred to the individual messages.

c.c. 其他選項Other options

  • 為所有匯出的內容產生文字檔: 為從審閱集匯出的每個交談產生一個文字檔。Generate text files for all exported content: Generates a text file for each conversation exported from the review set.

  • 以 Redacted Pdf 取代匯出的內容: 如果在複查程式期間產生 redacted 交談檔案,則匯出期間可使用這些檔案。Replace exported content with redacted PDFs: If redacted conversation files are generated during the review process, then these files are available during export. 您可以決定是否只匯出原生檔案 (但不要選取此選項) 或是使用原生檔案的 redacted 版本取代原生檔案 (方法是選取此選項) (匯出為 PDF 檔案)。You can decided whether to export only the native files (by not selecting this option) or to replace the native files with the redacted versions of the native files (by selecting this option), which are exported as PDF files.

其他相關資訊More information

若要深入瞭解如何在高級 eDiscovery 中查看案例資料,請參閱下列文章:To learn more about how to review case data in Advanced eDiscovery, see the following articles: