Microsoft 365 Purview eDiscovery: End User/Power User Immersive & Hands-On

Module 1: Introduction to Microsoft Purview and eDiscovery Fundamentals

Section 1.1 – Microsoft Purview Overview

· Understanding Microsoft Purview’s compliance capabilities

· eDiscovery in the Microsoft 365 ecosystem

· Use cases across HR, legal, and compliance

Section 1.2 – Navigating the Compliance Center

· Permissions and roles

· Finding your way around the eDiscovery interface

Hands-On Lab:

Explore the Compliance Center; locate eDiscovery, content search, audit, and data lifecycle tools.

Key Takeaways:

· Understand what Microsoft Purview covers and where to begin

· Know which tools serve legal and compliance needs

Module 2: Managing eDiscovery Cases and Legal Holds

Section 2.1 – Creating eDiscovery Cases

· How to start and organize a case

· Scoping cases by department or user group

Section 2.2 – Legal Hold Process

· Adding custodians and placing holds

· Scoping holds to mailboxes, Teams, OneDrive

Hands-On Lab:

Create an eDiscovery (Standard) case, apply a hold on mailbox and Teams data.

Key Takeaways:

· Create and manage cases with defensible legal holds

· Limit data exposure to what’s necessary

Module 3: Content Search and Review

Section 3.1 – Searching for Relevant Content

· Using keywords and KQL (Keyword Query Language)

· Filters: date, sender, location, and document type

Section 3.2 – Review Sets for First-Level Review

· Adding search results to review sets

· Using tags to organize findings

Hands-On Lab:

Run an advanced search with filters and KQL, then build a review set and tag selected items.

Key Takeaways:

· Gain practical search skills to surface relevant data

· Manage review sets effectively for collaboration

Module 4: Deep Dive into eDiscovery (Premium)

Section 4.1 – Upgrading and Enhancing a Case

· Key differences between Standard and Premium

· Custodian management and legal hold notifications

Section 4.2 – Tracking Communications and Escalations

· Sending and managing hold notifications

· Acknowledgment tracking and audit readiness

Hands-On Lab:

Upgrade a case to Premium, assign custodians, and configure notification templates and acknowledgments.

Key Takeaways:

· Enable full tracking of custodian responses

· Improve audit trail and legal defensibility

Module 5: Advanced Review Capabilities and Analytics

Section 5.1 – Themes, Near-Duplicates, and Relevance

· Grouping conversations and identifying duplicates

· Filtering content by machine-learned themes

Section 5.2 – Redaction and Sensitive Info Management

· Redacting sensitive data before export

· Tagging content for privilege or confidentiality

Hands-On Lab:

Run near-duplicate and theme analysis; redact sensitive data and flag privileged communications.

Key Takeaways:

· Use analytics to streamline large data reviews

· Protect confidentiality with built-in redaction tools

Module 6: Export and Chain of Custody

Section 6.1 – Exporting Data

· Export formats: PST, CSV, native files

· Managing de-duplication and file structure

Section 6.2 – Chain of Custody and Audit Logging

· Export summaries and logs

· Handling data transfer securely and defensibly

Hands-On Lab:

Export a review set, apply de-duplication, and examine the export log.

Key Takeaways:

· Perform compliant and traceable exports

· Maintain clear chain-of-custody documentation

Module 7: Automation and Governance Integration

Section 7.1 – Purview Governance Model

· Retention policies vs. legal holds

· Managing overlap and precedence

Section 7.2 – PowerShell & Graph API Use Cases

· Basic PowerShell cmdlets for automation

· API access for scaling large case management

Hands-On Lab:

Use PowerShell to list all active holds, generate reports, or set automated alerts.

Key Takeaways:

· Automate tasks for efficiency and accuracy

· Understand governance alignment with retention and security policies