Office 365 Security & Compliance Center eDiscovery – Part 4: Learning NEAR and ONEAR

This is the fourth in a series of posts focusing on helping you get the most out of Office 365 Content Search and eDiscovery.

Intro

Over the posts in this series, I’m going to go over the following concepts:

[ Continue reading ]

Office 365 Security & Compliance Center eDiscovery – Part 3: Phrases and Grouping AND OR’ing (Oh, my!)

This is the third in a series of posts focusing on helping you get the most out of Office 365 Content Search and eDiscovery.

Intro

Over the posts in this series, I’m going to go over the following concepts:

[ Continue reading ]

Office 365 Security & Compliance Center eDiscovery – Part 2: Condition Cards: Sender, Recipients, & Participants and Content Types

This is the second in a series of posts focusing on helping you get the most out of Office 365 Content Search and eDiscovery.

Intro

Over the posts in this series, I’m going to go over the following concepts:

[ Continue reading ]

Calculating your Daily Export for the Security & Compliance Center

Update: New link for export script: https://www.powershellgallery.com/packages/Get-SCCExportDataSize/

One of the lesser-known boundaries of Office 365’s Security & Compliance Center is that we only allow 2TB per day export volume.  When we talk about exports, we’re talking about the idea of taking content that has been identified via a content search mechanism (content search, eDiscovery case search, etc) and then staged for download.… [ Continue reading ]

Update to the Get-UserHoldPolicies Tool

A new year, a new update for Get-UserHoldPolicies!  Woo!

I stumbled across some additional information today regarding deciphering hold policies for mailboxes while troubleshooting another issue and decided to update my Get-UserHoldPolicies tool to reflect it.

The core pieces that I added:

  • Identifying Skype policies (as prefaced by sky in the InPlaceHolds property of a mailbox)
  • Identifying excluded mailbox policies (as prefaced by -mbx in the InPlaceHolds property of a mailbox)
  • Disposition action for items at the end of a retention period:
    • Delete only
    • Do nothing after retention period
    • Delete after retention period

You can see a few of the new options here. … [ Continue reading ]