It's possible to see an eDiscovery Hold previous updated date

Aase Nomad 246 Reputation points
2022-04-06T04:12:18.447+00:00

Last year around June-Sept, we put over 5k users OneDrive on eDiscovery litigation hold and we added their Mailbox on hold around Oct-Nov 2021. After Nov, we been adding a comments on some of the existing holds.

Our Legal team is currently asking us every details on when was this user mailbox was put on hold or when was this user OneDrive was put on hold but we have no idea since we didn't keep track of that last year.

We went to Compliance center and we were able to see the created date and modified date for any hold but the problem is modified date could be a day that we added a comment instead of putting their either onedrive, mailbox or both on hold.

I'm just wondering if there is a way to dig all the previous modified dates using either PowerShell or any Microsoft tools so that I confirm it?

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
10,672 questions
Windows Server PowerShell
Windows Server PowerShell
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.PowerShell: A family of Microsoft task automation and configuration management frameworks consisting of a command-line shell and associated scripting language.
5,382 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 39,381 Reputation points
    2022-04-13T04:59:46.903+00:00

    Hi @Aase Nomad

    You can make use of the audit log to get the required information.

    Content Search and eDiscovery-related activities (for Core eDiscovery and Advanced eDiscovery) that are performed in Microsoft 365 compliance center or by running the corresponding PowerShell cmdlets are logged in the audit log. Here is a link for a detailed description of the process that you must follow.

    How to search for and view eDiscovery activities https://learn.microsoft.com/en-us/microsoft-365/compliance/search-for-ediscovery-activities-in-the-audit-log?view=o365-worldwide

    Search the audit log in the compliance center https://learn.microsoft.com/en-us/microsoft-365/compliance/search-the-audit-log-in-security-and-compliance?view=o365-worldwide

    Hope this resolves your Query!!

    ----------

    --If the reply is helpful, please Upvote and Accept it as an answer–

    0 comments