- Module 1: eDiscovery offers built-in tools such as Content Search to help identify data used as evidence in legal cases. Content Search helps identify relevant data directly in Microsoft 365, reducing the amount of data that customers need to prepare and export to their third-party compliance tools. Advanced eDiscovery builds on the core eDiscovery solution, helping organizations respond more quickly with a streamlined end-to-end eDiscovery workflow, intelligent search capabilities to decrease manual work, and save on third-party storage costs.
- Describe the phases of the Electronic Discovery Reference Model.
- Identify how in-place holds are applied to data.
- Describe how to collect, preserve, and analyze data.
- Explain how to locate and use the Advanced eDiscovery tools in the Microsoft 365 Compliance Center.
- Module 2: Microsoft 365 delivers comprehensive audit logs and alerts across more than 15 services, which enables customers to track user and administration activity within their tenants. Improvements in Advanced Auditing in Microsoft 365 include preservation of audit logs for up to a year, faster access to data, and access to crucial events for quicker investigations.
- Describe the preservation improvements that have been made in advanced auditing.
- Describe the bandwidth improvements that have been made in auditing.
- Describe the new MailItemsAccessed mailbox auditing action and how it can help investigators better understand and identify the scope of compromises to specific mail items that may have been compromised.
Upon completion of this module, you should be able to:
Upon completion of this module, you should be able to:
