使用內容搜尋工具搜尋內容Search for content using the Content Search tool

• 2021/3/21
• • m

使用安全性 & 合規性中心的內容搜尋工具，可在 Exchange 信箱、SharePoint 網站中的檔，以及在商務用 Skype 中 OneDrive 位置，快速尋找電子郵件。Use the Content Search tool in the Security & Compliance Center to quickly find email in Exchange mailboxes, documents in SharePoint sites and OneDrive locations, and instant messaging conversations in Skype for Business. 您可以使用內容搜尋工具，在共同作業工具（例如 Microsoft 團隊和 Microsoft 365 群組）中搜尋電子郵件、檔和立即訊息交談。You can use the content search tool to search for email, documents, and instant messaging conversations in collaboration tools such as Microsoft Teams and Microsoft 365 Groups.

搜尋內容Search for content

第一步是開始使用內容搜尋工具來選擇要搜尋的內容位置，並設定關鍵字查詢以搜尋特定專案。The first step is to starting using the Content Search tool to choose content locations to search and configure a keyword query to search for specific items. 或者，您可以只保留查詢空白，並傳回目標位置中的所有專案。Or, you can just leave the query blank and return all items in the target locations.

• 建立並執行 內容搜尋Create and run a content search

• 建立搜尋查詢和使用條件 以縮小搜尋範圍Build search queries and use conditions to narrow your search

• 設定搜尋許可權篩選 ，使 eDiscovery 管理員只會搜尋組織中的信箱或網站的子集Configure search permissions filtering so that an eDiscovery manager can only search subset of mailboxes or sites in your organization

• 執行識別碼清單搜尋 以搜尋特定的電子郵件Run an ID list search to search for specific email messages

• 在 Microsoft 365 中搜尋內部部署使用者的雲端架構信箱Search cloud-based mailboxes for on-premises users in Microsoft 365

• 查看搜尋結果的關鍵字統計資料，然後在必要時精煉查詢View keyword statistics for the results of a search and then refine the query if necessary

• 搜尋您的組織已匯入 Microsoft 365 的協力廠商資料Search for third-party data that your organization has imported to Microsoft 365

• 大量編輯 查詢和內容位置以進行多個搜尋Bulk edit the query and content locations for multiple searches

• 重試內容搜尋 以解決內容位置錯誤Retry a Content Search to resolve a content location error

• 保留密件副本 收件者，以便進行搜尋Preserve Bcc recipients so you can search for them

對所找到的內容執行動作Perform actions on content you find

在您執行搜尋並視需要加以調整之後，下一步是針對搜尋傳回的結果執行某些動作。After you run a search and refine it as necessary, the next step is to do something with the results returned by the search. 您可以將結果匯出並下載到您的本機電腦上，或在組織的電子郵件攻擊案例中，從使用者信箱中刪除搜尋結果。You can export and download the results to your local computer or in the case of a email attack on your organization, you can delete the results of a search from user mailboxes.

• 匯出內容搜尋的結果 ，並將其下載到您的本機電腦Export the results of a content search and download them to your local computer

• 搜尋並刪除電子郵件訊息 ，例如內容為病毒、危險附件或網路釣魚郵件的郵件Search for and delete email messages , such as messages that content a virus, dangerous attachments, or phishing messages

• 匯出 內容搜尋結果的報告，但不匯出實際結果Export a report about the results of a content search, without exporting the actual results

深入瞭解內容搜尋Learn more about content search

內容搜尋很容易使用，但也是功能強大的工具。Content Search is easy to use, but it's also a powerful tool. 在幕後，有許多事情會發生。Behind-the-scenes, there's a lot going on. 您對它的瞭解越多，並瞭解其行為及其限制，您就能更順利地使用它來滿足您組織的搜尋和調查需求。The more you know about it and understand its behavior and its limitations, the more successful you'll be using it for your organization's search and investigation needs. 深入瞭解：Learn about:

• Exchange 和 SharePoint 中已部分編制索引的專案 ，以及當您匯出及下載搜尋結果時要包含或排除的專案Partially indexed items in Exchange and SharePoint and how to include or exclude them when you export and download search results

• 調查已部分索引的專案 ，並決定貴組織對它們的危險性Investigate partially indexed items and determine your organization's exposure to them

• 內容搜尋工具的限制，例如，您可以一次執行的搜尋數目上限，以及可以包含在單一搜尋中的最大內容位置數目。Limits of the Content Search tool, such as the maximum number of searches that you can run at one time and the maximum number of content locations you can include in a single search

• 當您匯出及下載搜尋結果時，預估和實際搜尋結果的原因可能有差異。Estimated and actual search results and the reasons why there might be differences between them when you export and download search results

• 當您匯出搜尋結果的電子郵件時，您可以啟用的搜尋結果中的重復資料刪除De-duplication in search results that you can enable when you export email messages that are the results of a search

使用腳本進行高級案例Use scripts for advanced scenarios

有時候，您必須執行更高級、複雜和重複的內容搜尋工作。Sometimes you have to perform more advanced, complex, and repetitive content search tasks. 在這些情況下，在安全性 & 規範中心使用 PowerShell 命令會變得更輕鬆快捷。In these cases, it's easier and fast to use PowerShell commands in the Security & Compliance Center. 為了簡化這項作業，我們已建立了許多安全性 & 合規性中心 PowerShell 腳本，協助您完成複雜的內容搜尋相關工作。To help make this easier, we've created a number of Security & Compliance Center PowerShell scripts to help you complete complex content search-related tasks.

• 搜尋特定的信箱和網站資料夾 (稱為 * 目標集合) 當您確信回應案例的專案位於該資料夾中時Search specific mailbox and site folders (called a *targeted collection) when you're confident that items responsive to a case are located in that folder

• 在信箱和 OneDrive 位置搜尋 使用者清單Search the mailbox and OneDrive location for a list of users

• 建立、報告和刪除多個搜尋 ，以快速且有效地識別及挑選搜尋資料Create, report on, and delete multiple searches to quickly and efficiently identify and cull search data

• 複製內容搜尋 並快速比較不同關鍵字搜尋查詢的結果在相同的內容位置上執行;或者，您可以使用腳本，在您建立新的搜尋時不必重新輸入大量的內容位置，以節省時間Clone a content search and quickly compare the results of different keyword search queries run on the same content locations; or use the script to save time by not having to re-enter a large number of content locations when you create a new search