Describe the eDiscovery and Audit capabilities in Microsoft Purview

Question 1

Describe the eDiscovery solutions in Microsoft Purview

Answer 1

eDiscovery is the process of identifying and delivering electronic information that can be used as evidence in legal cases.

It provides 3 eDiscovery solutions:
-Content Search: Use the search tool to search for content across Microsoft 365.
-eDiscovery (Standard): it gives you what is in the content search plus the ability to assign managers to cases and associate searches to a case.
-eDiscovery (Premium): It gives you what eDiscovery standard gives you plus end-to-end workflow to identify, preserve, collect, review, analyze, and export content that’s responsive to your organization’s internal and external investigations. It lets legal teams manage custodians, people that you’ve identified as people of interest in the case, and the workflow to communicate with custodians.

Question 2

Describe the audit solutions in Microsoft Purview

Answer 2

-Audit (Standard). Audit (Standard) provides you with the ability to log and search for audited activities and power your forensic, IT, compliance, and legal investigations. Audit (Standard) is turned on by default for all organizations with the appropriate subscription.

-Audit (Premium) builds on the capabilities of Audit (Standard). Audit (Premium) provides audit log retention policies and longer retention of audit records. It provides intelligent insights that can help you investigate possible breaches and determine the scope of compromise.