Microsoft 365 中的 eDiscovery 解決方案eDiscovery solutions in Microsoft 365

電子搜索 (eDiscovery) 是識別與傳遞電子資訊的程序,而且此類資訊可在法律案件中做為呈堂證據。Electronic discovery, or eDiscovery, is the process of identifying and delivering electronic information that can be used as evidence in legal cases. 您可以使用 Microsoft 365 中的 eDiscovery 工具,搜尋 Exchange Online 信箱、Microsoft 365 群組、Microsoft 小組、SharePoint Online 和商務用 Skype OneDrive 中的內容,以及商務用 Skype 交談和 Yammer 小組。You can use eDiscovery tools in Microsoft 365 to search for content in Exchange Online mailboxes, Microsoft 365 Groups, Microsoft Teams, SharePoint Online and OneDrive for Business sites, and Skype for Business conversations, and Yammer teams. 您可以使用內容搜尋工具,在相同 eDiscovery 搜尋中搜尋信箱和網站。You can search mailboxes and sites in the same eDiscovery search by using the Content Search tool. 您也可以使用核心 eDiscovery 案例來識別、保留及匯出信箱和網站中的內容。And you can use Core eDiscovery cases to identify, hold, and export content found in mailboxes and sites. 如果您的組織有 Office 365 E5 或 Microsoft 365 E5 訂閱 (或相關的 E5 附加元件訂閱) ,您可以使用 Microsoft 365 中的高級 eDiscovery 解決方案,進一步管理保管人及分析內容。If your organization has an Office 365 E5 or Microsoft 365 E5 subscription (or related E5 add-on subscriptions), you can further manage custodians and analyze content by using the Advanced eDiscovery solution in Microsoft 365.

Microsoft 365 提供下列 eDiscovery 工具:Microsoft 365 provides the following eDiscovery tools:

下表包含可協助您使用內容搜尋工具的文章連結。The following table contains links to articles that will help you use the Content search tool.

文章Article 描述Description
執行搜尋Run a search
瞭解如何使用內容搜尋工具來搜尋信箱、公用資料夾、Microsoft 365 群組、Microsoft 團隊、SharePoint 線上網站、商務位置的一個磁片磁碟機,以及您組織中單一搜尋中的商務用 Skype 交談。Learn how to use the Content Search tool to search mailboxes, public folders, Microsoft 365 Groups, Microsoft Teams, SharePoint Online sites, One Drive for Business locations, and Skype for Business conversations in your organization in a single search.
關鍵字查詢與搜尋條件Keyword queries and search conditions
深入瞭解您可以用來搜尋組織中信箱和網站內容的電子郵件和檔案屬性和搜尋條件。Learn about the email and file properties and search conditions you can use to search for content in mailboxes and sites in your organization.
檢視搜尋結果的關鍵字統計資料View keyword statistics for search results
瞭解如何使用搜尋統計資料來顯示及比較一或多個內容搜尋的統計資料,以及設定新的和現有的搜尋,以傳回搜尋查詢中每個關鍵字的統計資料。Learn how to use search statistics to display and compare the statistics for one or more content searches, and to configure new and existing searches to return statistics for each keyword in the search query.
匯出搜尋結果Export search results
瞭解如何匯出內容搜尋的結果。Learn how to export the results of a Content search.
設定內容搜尋的許可權篩選Configure permissions filtering for Content search
瞭解如何使用許可權篩選,讓 eDiscovery 管理員只搜尋組織中信箱和網站的子集。Learn how to use permissions filtering to let an eDiscovery manager search only a subset of mailboxes and sites in your organization.
匯出搜尋報告Export a search report
瞭解如何下載匯出報告,而不必匯出實際的搜尋結果。Learn how to download the export report without having to export the actual search results.
內容搜尋限制Content search limits
瞭解內容搜尋工具的限制,例如,您可以一次執行的最大搜尋數目。Learn about the limits of the Content Search tool, such as the maximum number of searches that you can run at one time.
內容搜尋中未編制索引的專案Unindexed items in Content search
瞭解 Exchange 和 SharePoint 中未編制索引的專案,當您執行搜尋時,您可以在預估搜尋結果統計資料中包含這些專案。Learn about unindexed items in Exchange and SharePoint that you can include in the estimated search result statistics when you run a search. 您也可以在匯出搜尋結果時包含未編制索引的專案。You can also include unindexed items when you export search results.
搜尋並刪除電子郵件訊息Search for and delete email messages
瞭解如何使用內容搜尋來搜尋和刪除組織中 所有 信箱的電子郵件訊息。Learn how to use Content search to search for and delete an email message from all mailboxes in your organization. 這可協助您尋找及移除可能有害或高風險的電子郵件。This can help you find and remove potentially harmful or high-risk email.
在信箱和 OneDrive 帳戶中搜尋使用者清單Search the mailbox and OneDrive accounts for a list of users
瞭解如何使用腳本來搜尋信箱,以及一組使用者的商務用網站。Learn how to use a script to search the mailbox and One Drive for Business site for a group of users. 請參閱 建立所有 OneDrive 位置的清單 ,以取得如何快速產生您建立及執行內容搜尋時可用於來源內容位置的電子郵件地址清單的步驟。See Create a list of all OneDrive locations for steps on how to quickly generate a list of email addresses that you can use for the source content locations when you create and run content searches.
對目標集合使用內容搜尋Use Content search for targeted collections
瞭解如何使用本文中的 Windows PowerShell 腳本,使用內容搜尋來執行目標集合。Learn how to use the Windows PowerShell script in this article to perform targeted collections using Content search. 目標集合表示您要搜尋特定的資料夾,因為您確信專案的回應方式 (或特權專案) 位於該資料夾中。A targeted collection means you want to search a specific folder because you're confident that items responsive to a case (or privileged items) are located in that folder. 使用本文中的腳本,取得您要搜尋之特定信箱或網站資料夾的資料夾識別碼或路徑。Use the script in this article to obtain the folder ID or path for the specific mailbox or site folders that you want to search.

核心電子文件探索Core eDiscovery

下表包含主題的連結,這些主題可協助您使用核心 eDiscovery 案例。The following table contains links to topics that will help you use Core eDiscovery cases. 您可以使用核心 eDiscovery 案例來新增可以存取案例的 eDiscovery 管理員、在與案例相關的內容位置上放置 eDiscovery 暫止功能、搜尋內容,以及從案例中匯出搜尋結果。You can use Core eDiscovery cases to add eDiscovery managers who can access the case, place an eDiscovery hold on content locations relevant to the case, search for content, and export the search results from the case.

文章Article 描述Description
開始使用核心電子文件探索Get started with Core eDiscovery 瞭解如何指派 eDiscovery 許可權,以及建立核心 eDiscovery 案例。Learn how to assign eDiscovery permissions and create Core eDiscovery cases. 本主題也提供核心 eDiscovery 工作流程的概述。This topic also provides an overview of the Core eDiscovery workflow.
指派電子文件權限Assign eDiscovery permissions 瞭解如何將許可權指派給使用者,讓他們能夠搜尋內容、將內容位置保留,以及在核心 eDiscovery 案例中執行其他 eDiscovery 相關工作。Learn how to assign permissions to users so they can search for content, place content locations on hold, and perform other eDiscovery-related tasks in a Core eDiscovery case.
設定核心電子檔探索的規範界限Set up compliance boundaries for Core eDiscovery 瞭解如何使用規範界限,在組織中建立邏輯界限,以控制 eDiscovery 管理員可搜尋的內容位置。Learn how to use compliance boundaries to create logical boundaries within an organization that control the content locations that an eDiscovery manager can search.
建立電子文件探索保留Create an eDiscovery hold 瞭解如何建立與核心 eDiscovery 案例相關聯的 eDiscovery 保留,以保留與您正在調查之案例相關的內容。Learn how to create eDiscovery holds that associated with a Core eDiscovery case to preserve content relevant to the case you're investigating.
在案例中搜尋內容Search for content in a case 瞭解如何搜尋與案例相關的內容。Learn how to search for content that's relevant to a case. 您可以快速建立搜尋,搜尋保留的內容位置。You can quickly create searches that search the content locations on hold.
從案例匯出內容Export content from a case 瞭解如何從核心 eDiscovery 案例中匯出及下載內容。Learn how to export and download content from a Core eDiscovery case.
關閉、重新開啟及刪除案例Close, reopen, and delete a case 瞭解如何管理核心 eDiscovery 案例的生命週期。Learn how to manage the lifecycle of a Core eDiscovery case.

進階電子文件探索Advanced eDiscovery

Microsoft 365 (中的「Advanced eDiscovery」方案也稱為「 Advanced ediscovery」 2.0) ,它是以 microsoft 365 中現有的 eDiscovery 和分析功能為基礎。The Advanced eDiscovery solution in Microsoft 365 (also called Advanced eDiscovery v2.0) builds on the existing eDiscovery and analytics capabilities in Microsoft 365. 這種 eDiscovery 解決方案提供了端對端工作流程,可保留、收集、審閱、分析和匯出以回應組織內部和外部調查的內容。This eDiscovery solution provides an end-to-end workflow to preserve, collect, review, analyze, and export content that's responsive to your organization's internal and external investigations. 它也可讓法律團隊管理保管人和整個法律封存通知工作流程,以與案例相關的保管人進行通訊。It also lets legal teams manage custodians and the entire legal hold notification workflow to communicate with custodians involved in a case.

文章Article 描述Description
進階電子文件探索概觀Overview of Advanced eDiscovery 本文介紹高級 eDiscovery,概述使用此工具的業務理由、呈現高級 eDiscovery 架構,並提供高級 eDiscovery 的內建工作流程的高層次概述。This article introduces Advanced eDiscovery, outlines the business justification for using this tool, presents Advanced eDiscovery architecture, and provides a high-level overview of the built-in workflow of Advanced eDiscovery.
設定高級電子檔探索Set up Advanced eDiscovery 瞭解如何開始使用「高級 eDiscovery」(包括必要的授權和必要的 eDiscovery 許可權)。Learn how to get started using Advanced eDiscovery, including the required licensing and necessary eDiscovery permission.
建立及管理案例Create and manage a case 本文說明如何建立高級 eDiscovery 案例,並提供高級 eDiscovery 工作流程的逐步講解。This article shows you how to create an Advanced eDiscovery case and provides a walk-through of the Advanced eDiscovery workflow.
管理監管人Manage custodians 瞭解如何在高級 eDiscovery 中使用保管人。Learn about working with custodians in an Advanced eDiscovery. 本主題連結至逐步指示,將保管人新增至案例、在案例中管理保管人,以及透過搜尋審核記錄檔來查看 Microsoft 365 中的保管人活動。This topic links to step-by-step instructions to add custodians to a case, managing custodians in a case, and viewing custodian activity in Microsoft 365 by searching the audit log.
管理保管人通訊Manage custodian communications 瞭解如何在「高級 eDiscovery」中管理合法保留通知程式。Learn about managing the legal hold notification process in Advanced eDiscovery. 這包括建立及自動化通知工作流程,以及使用者如何認可保留通知。This includes creating and automating the notification workflow and how a user acknowledged a hold notification.
管理處理錯誤Manage processing errors 深入瞭解高級索引,以及如何從 custodial 和非 custodial 內容位置(例如 Exchange 信箱、SharePoint 網站和 OneDrive 帳戶)修復內容中的索引錯誤。Learn about Advanced indexing and how to remediate indexing errors in content from custodial and non-custodial content locations, such as Exchange mailboxes, SharePoint sites, and OneDrive accounts. 您可以大量修正錯誤,然後將修正的檔案上傳至複查集,或修正檢查集內的個別處理錯誤。You can bulk-remediate errors and then upload remediated files to a review set or remediate individual processing errors within a review set.
收集適用於案例的資料Collect data for a case 瞭解如何在 custodial 內容位置搜尋內容,然後將相關案例資料新增至審閱集。Learn about searching for content in custodial content locations, and then adding relevant case data to a review set. 當您將內容複寫到審閱集時,會將資料從原始內容位置複製到 Microsoft 提供的 Azure 儲存位置。When you copy content to a review set, the data is copied from the original content locations to a Microsoft-provided Azure Storage location. 這為審閱程式提供一組靜態檔。This provides a static set of documents for the review process.
管理檢閱集Manage review sets 瞭解如何在審閱集中查看案例資料。Learn about reviewing case data in a review set. 這包括查看、查詢、篩選及標記審閱集中的檔。This includes viewing, querying, filtering, and tagging documents in a review set.
分析審閱集中的資料Analyze data in a review set 瞭解如何對審閱集中的檔執行分析。Learn about running analysis on the documents in a review set. 執行分析的結果包括近期重複偵測、電子郵件執行緒及主題識別。The results of running analysis include near-duplication detection, email threading, and themes identification.
匯出案例資料Export case data 瞭解從案例中匯出資料以供外部複查。Learn about exporting data from a case for external review.

eDiscovery 藍圖eDiscovery roadmap

若要查看已啟動的 eDiscovery 功能、正在進行中或在開發中,請參閱 Microsoft 365 藍圖To see what eDiscovery features have been launched, are rolling out, or in development, see the Microsoft 365 Roadmap.