Manage data sources and holds in Microsoft Purview eDiscovery

Intermediate
Administrator
Auditor
Microsoft 365
Microsoft Purview

Managing data sources and applying holds in Microsoft Purview eDiscovery helps ensure that investigations are scoped correctly and that relevant content is preserved. Defining where to search, applying hold policies, and using PowerShell to confirm preservation are key steps in supporting legal and regulatory requirements.

Learning objectives

In this module you learn how to:

  • Identify and configure the content sources used in eDiscovery searches and holds
  • Apply tenant-wide or scoped holds based on the needs of an investigation
  • Review and adjust existing hold policies as cases progress
  • Use PowerShell to verify hold settings and data preservation

Prerequisites

  • Experience with creating cases and running searches in Microsoft Purview eDiscovery
  • Understanding of Microsoft 365 content locations (Exchange, SharePoint, OneDrive)
  • Familiarity with Exchange Online or Security & Compliance PowerShell