Auf Englisch lesen

Freigeben über

Clear-MgSecurityCaseEdiscoveryCaseSearchData

  • Reference
Module:
Microsoft.Graph.Security

Delete Microsoft Teams messages contained in an eDiscovery search. You can collect and purge the following categories of Teams content:- Teams 1:1 chats - Chat messages, posts, and attachments shared in a Teams conversation between two people. Teams 1:1 chats are also called conversations.- Teams group chats - Chat messages, posts, and attachments shared in a Teams conversation between three or more people. Also called 1:N chats or group conversations.- Teams channels - Chat messages, posts, replies, and attachments shared in a standard Teams channel.- Private channels - Message posts, replies, and attachments shared in a private Teams channel.- Shared channels - Message posts, replies, and attachments shared in a shared Teams channel. For more information about purging Teams messages, see:- eDiscovery solution series: Data spillage scenario - Search and purge- eDiscovery (Premium) workflow for content in Microsoft Teams

Hinweis

To view the beta release of this cmdlet, view Clear-MgBetaSecurityCaseEdiscoveryCaseSearchData

Syntax

PowerShell 
Clear-MgSecurityCaseEdiscoveryCaseSearchData
     -EdiscoveryCaseId <String>
     -EdiscoverySearchId <String>
     [-ResponseHeadersVariable <String>]
     [-AdditionalProperties <Hashtable>]
     [-PurgeAreas <String>]
     [-PurgeType <String>]
     [-Headers <IDictionary>]
     [-PassThru]
     [-ProgressAction <ActionPreference>]
     [-WhatIf]
     [-Confirm]
     [<CommonParameters>]
PowerShell 
Clear-MgSecurityCaseEdiscoveryCaseSearchData
     -EdiscoveryCaseId <String>
     -EdiscoverySearchId <String>
     -BodyParameter <IPathsMs4I8WSecurityCasesEdiscoverycasesEdiscoverycaseIdSearchesEdiscoverysearchIdMicrosoftGraphSecurityPurgedataPostRequestbodyContentApplicationJsonSchema>
     [-ResponseHeadersVariable <String>]
     [-Headers <IDictionary>]
     [-PassThru]
     [-ProgressAction <ActionPreference>]
     [-WhatIf]
     [-Confirm]
     [<CommonParameters>]
PowerShell 
Clear-MgSecurityCaseEdiscoveryCaseSearchData
     -InputObject <ISecurityIdentity>
     [-ResponseHeadersVariable <String>]
     [-AdditionalProperties <Hashtable>]
     [-PurgeAreas <String>]
     [-PurgeType <String>]
     [-Headers <IDictionary>]
     [-PassThru]
     [-ProgressAction <ActionPreference>]
     [-WhatIf]
     [-Confirm]
     [<CommonParameters>]
PowerShell 
Clear-MgSecurityCaseEdiscoveryCaseSearchData
     -InputObject <ISecurityIdentity>
     -BodyParameter <IPathsMs4I8WSecurityCasesEdiscoverycasesEdiscoverycaseIdSearchesEdiscoverysearchIdMicrosoftGraphSecurityPurgedataPostRequestbodyContentApplicationJsonSchema>
     [-ResponseHeadersVariable <String>]
     [-Headers <IDictionary>]
     [-PassThru]
     [-ProgressAction <ActionPreference>]
     [-WhatIf]
     [-Confirm]
     [<CommonParameters>]

Description

Delete Microsoft Teams messages contained in an eDiscovery search. You can collect and purge the following categories of Teams content:- Teams 1:1 chats - Chat messages, posts, and attachments shared in a Teams conversation between two people. Teams 1:1 chats are also called conversations.- Teams group chats - Chat messages, posts, and attachments shared in a Teams conversation between three or more people. Also called 1:N chats or group conversations.- Teams channels - Chat messages, posts, replies, and attachments shared in a standard Teams channel.- Private channels - Message posts, replies, and attachments shared in a private Teams channel.- Shared channels - Message posts, replies, and attachments shared in a shared Teams channel. For more information about purging Teams messages, see:- eDiscovery solution series: Data spillage scenario - Search and purge- eDiscovery (Premium) workflow for content in Microsoft Teams

Examples

Example 1: Code snippet

PowerShell 
Import-Module Microsoft.Graph.Security

$params = @{
	purgeType = "recoverable"
	purgeAreas = "teamsMessages"
}

Clear-MgSecurityCaseEdiscoveryCaseSearchData -EdiscoveryCaseId $ediscoveryCaseId -EdiscoverySearchId $ediscoverySearchId -BodyParameter $params

This example shows how to use the Clear-MgSecurityCaseEdiscoveryCaseSearchData Cmdlet.

Parameters

-AdditionalProperties

Additional Parameters

Type:Hashtable
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-BodyParameter

To construct, see NOTES section for BODYPARAMETER properties and create a hash table.

Type:IPathsMs4I8WSecurityCasesEdiscoverycasesEdiscoverycaseIdSearchesEdiscoverysearchIdMicrosoftGraphSecurityPurgedataPostRequestbodyContentApplicationJsonSchema
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-Confirm

Prompts you for confirmation before running the cmdlet.

Type:SwitchParameter
Aliases:cf
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-EdiscoveryCaseId

The unique identifier of ediscoveryCase

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-EdiscoverySearchId

The unique identifier of ediscoverySearch

Type:String
Position:Named
Default value:None
Required:True
Accept pipeline input:False
Accept wildcard characters:False

-Headers

Optional headers that will be added to the request.

Type:IDictionary
Position:Named
Default value:None
Required:False
Accept pipeline input:True
Accept wildcard characters:False

-InputObject

Identity Parameter To construct, see NOTES section for INPUTOBJECT properties and create a hash table.

Type:ISecurityIdentity
Position:Named
Default value:None
Required:True
Accept pipeline input:True
Accept wildcard characters:False

-PassThru

Returns true when the command succeeds

Type:SwitchParameter
Position:Named
Default value:False
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ProgressAction

{{ Fill ProgressAction Description }}

Type:ActionPreference
Aliases:proga
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PurgeAreas

purgeAreas

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-PurgeType

purgeType

Type:String
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-ResponseHeadersVariable

Optional Response Headers Variable.

Type:String
Aliases:RHV
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

-WhatIf

Shows what would happen if the cmdlet runs. The cmdlet is not run.

Type:SwitchParameter
Aliases:wi
Position:Named
Default value:None
Required:False
Accept pipeline input:False
Accept wildcard characters:False

Inputs

Microsoft.Graph.PowerShell.Models.IPathsMs4I8WSecurityCasesEdiscoverycasesEdiscoverycaseIdSearchesEdiscoverysearchIdMicrosoftGraphSecurityPurgedataPostRequestbodyContentApplicationJsonSchema

Microsoft.Graph.PowerShell.Models.ISecurityIdentity

System.Collections.IDictionary

Outputs

System.Boolean

Notes

COMPLEX PARAMETER PROPERTIES

To create the parameters described below, construct a hash table containing the appropriate properties. For information on hash tables, run Get-Help about_Hash_Tables.

BODYPARAMETER <IPathsMs4I8WSecurityCasesEdiscoverycasesEdiscoverycaseIdSearchesEdiscoverysearchIdMicrosoftGraphSecurityPurgedataPostRequestbodyContentApplicationJsonSchema>: .

  • [(Any) <Object>]: This indicates any property can be added to this object.
  • [PurgeAreas <String>]: purgeAreas
  • [PurgeType <String>]: purgeType

INPUTOBJECT <ISecurityIdentity>: Identity Parameter

  • [AlertId <String>]: The unique identifier of alert
  • [ArticleId <String>]: The unique identifier of article
  • [ArticleIndicatorId <String>]: The unique identifier of articleIndicator
  • [AttackSimulationOperationId <String>]: The unique identifier of attackSimulationOperation
  • [AuthoredNoteId <String>]: The unique identifier of authoredNote
  • [AuthorityTemplateId <String>]: The unique identifier of authorityTemplate
  • [CaseOperationId <String>]: The unique identifier of caseOperation
  • [CategoryTemplateId <String>]: The unique identifier of categoryTemplate
  • [CitationTemplateId <String>]: The unique identifier of citationTemplate
  • [DataSourceId <String>]: The unique identifier of dataSource
  • [DepartmentTemplateId <String>]: The unique identifier of departmentTemplate
  • [DispositionReviewStageNumber <String>]: The unique identifier of dispositionReviewStage
  • [EdiscoveryCaseId <String>]: The unique identifier of ediscoveryCase
  • [EdiscoveryCustodianId <String>]: The unique identifier of ediscoveryCustodian
  • [EdiscoveryNoncustodialDataSourceId <String>]: The unique identifier of ediscoveryNoncustodialDataSource
  • [EdiscoveryReviewSetId <String>]: The unique identifier of ediscoveryReviewSet
  • [EdiscoveryReviewSetQueryId <String>]: The unique identifier of ediscoveryReviewSetQuery
  • [EdiscoveryReviewTagId <String>]: The unique identifier of ediscoveryReviewTag
  • [EdiscoveryReviewTagId1 <String>]: The unique identifier of ediscoveryReviewTag
  • [EdiscoverySearchId <String>]: The unique identifier of ediscoverySearch
  • [EndUserNotificationDetailId <String>]: The unique identifier of endUserNotificationDetail
  • [EndUserNotificationId <String>]: The unique identifier of endUserNotification
  • [FilePlanReferenceTemplateId <String>]: The unique identifier of filePlanReferenceTemplate
  • [HealthIssueId <String>]: The unique identifier of healthIssue
  • [HostComponentId <String>]: The unique identifier of hostComponent
  • [HostCookieId <String>]: The unique identifier of hostCookie
  • [HostId <String>]: The unique identifier of host
  • [HostPairId <String>]: The unique identifier of hostPair
  • [HostPortId <String>]: The unique identifier of hostPort
  • [HostSslCertificateId <String>]: The unique identifier of hostSslCertificate
  • [HostTrackerId <String>]: The unique identifier of hostTracker
  • [IncidentId <String>]: The unique identifier of incident
  • [IntelligenceProfileId <String>]: The unique identifier of intelligenceProfile
  • [IntelligenceProfileIndicatorId <String>]: The unique identifier of intelligenceProfileIndicator
  • [LandingPageDetailId <String>]: The unique identifier of landingPageDetail
  • [LandingPageId <String>]: The unique identifier of landingPage
  • [LoginPageId <String>]: The unique identifier of loginPage
  • [PassiveDnsRecordId <String>]: The unique identifier of passiveDnsRecord
  • [PayloadId <String>]: The unique identifier of payload
  • [RetentionEventId <String>]: The unique identifier of retentionEvent
  • [RetentionEventTypeId <String>]: The unique identifier of retentionEventType
  • [RetentionLabelId <String>]: The unique identifier of retentionLabel
  • [SecureScoreControlProfileId <String>]: The unique identifier of secureScoreControlProfile
  • [SecureScoreId <String>]: The unique identifier of secureScore
  • [SimulationAutomationId <String>]: The unique identifier of simulationAutomation
  • [SimulationAutomationRunId <String>]: The unique identifier of simulationAutomationRun
  • [SimulationId <String>]: The unique identifier of simulation
  • [SiteSourceId <String>]: The unique identifier of siteSource
  • [SslCertificateId <String>]: The unique identifier of sslCertificate
  • [SubcategoryTemplateId <String>]: The unique identifier of subcategoryTemplate
  • [SubdomainId <String>]: The unique identifier of subdomain
  • [SubjectRightsRequestId <String>]: The unique identifier of subjectRightsRequest
  • [TrainingId <String>]: The unique identifier of training
  • [TrainingLanguageDetailId <String>]: The unique identifier of trainingLanguageDetail
  • [UnifiedGroupSourceId <String>]: The unique identifier of unifiedGroupSource
  • [UserId <String>]: The unique identifier of user
  • [UserSourceId <String>]: The unique identifier of userSource
  • [VulnerabilityComponentId <String>]: The unique identifier of vulnerabilityComponent
  • [VulnerabilityId <String>]: The unique identifier of vulnerability
  • [WhoisHistoryRecordId <String>]: The unique identifier of whoisHistoryRecord
  • [WhoisRecordId <String>]: The unique identifier of whoisRecord