Manage data sources and holds in Microsoft Purview eDiscovery

Module
9 Units

Intermediate

Administrator

Auditor

Microsoft 365

Microsoft Purview

Managing data sources and applying holds in Microsoft Purview eDiscovery helps ensure that investigations are scoped correctly and that relevant content is preserved. Defining where to search, applying hold policies, and using PowerShell to confirm preservation are key steps in supporting legal and regulatory requirements.

Learning objectives

In this module you learn how to:

Identify and configure the content sources used in eDiscovery searches and holds
Apply tenant-wide or scoped holds based on the needs of an investigation
Review and adjust existing hold policies as cases progress
Use PowerShell to verify hold settings and data preservation

Prerequisites

Experience with creating cases and running searches in Microsoft Purview eDiscovery
Understanding of Microsoft 365 content locations (Exchange, SharePoint, OneDrive)
Familiarity with Exchange Online or Security & Compliance PowerShell

Introduction min
Understand data sources in eDiscovery min
Select and manage data sources min
Create holds in eDiscovery min
Manage and maintain eDiscovery holds min
Preserve mailbox content and metadata under hold min
Identify and report on mailbox holds min
Module assessment min
Summary min