Find sensitive data with eDiscovery Finding sensitive data with eDiscovery in Microsoft Purview. A separate case called Sensitive data with eDiscovery (Premium) turned on. A search with the Sensitive Type condition for IP Address across all sites and a second across all mailboxes, statistics and a top 100 report, and then a Date condition that narrows it down to sensitive data older than 2020. Patterns such as regular expressions belong in a custom sensitive information type, not in the search query. W EDISCOVERY · KNOW YOUR DATA Find sensitive data with eDiscovery Ada Admin Eli Employee DATA EXPLORER OR EDISCOVERY? Counts, or a list you can act on Microsoft Purview Related solutions AuditData SecurityInvestigations Cases Create case ⤓ Export list↻ Refresh Case nameStatusCreatedModified by Cases › Stale data Stale data SearchesHold policiesReview setsExportsData sources Create a search query to find data and content that's relevant to your case. Create a search Search nameQuery textCreated byModified Search Hold Review set Export Add to review set Export Process manager Delete search Query: QueryStatisticsSample Run query Data sources Add sources To search across your entireorganization, add tenant-wide sources. Add sources Add tenant-wide sources ⌄ Tenant (2) All people and groups All public folders Condition builder Build a search query with a visual condition filtering experience. Add more conditions and use operators like AND, OR to control the logic between conditions. KeyQL can also be pasted. Assessing request, 0 locations identifiedCalculating time remaining… Summary These numbers are estimates and don't include file versions, SharePoint folders and lists, or cloud attachments. New case ⌄ Advanced settings (optional) eDiscovery (Premium) To use premium features like searchable query conditions, search by file, and sensitivity types, turn on eDiscovery (premium). Create New search Create Manage sources NameMailboxesSites All people and groupsAll public folders Save Cancel Choose search results Select the type of search results you want to view: Statistical or Sample. Statistics Summary of collected data estimates arranged by top indicators Include categories People, sensitive information types, item classes and errors. Include query keywords report. Include partially indexed items Sample Representative selection of full search results Run query Choose which conditions to add Filter conditions All (28) Common (11) Exchange Online mailboxes (10) SharePoint and OneDrive sites (6) Apply Data source 100 items LocationLocation typeCount Download report Close WHAT ABOUT REGEX? Patterns belong in a SIT eDiscovery builds the query in KQL, from conditions and keywords. KQL supports wildcards, not regular expressions. A pattern, like your own customer number, becomes a custom sensitive information type. Search for it by its ID, not its name. Then the same SIT works in both eDiscovery and DLP. Good to know 1/7 EDISCOVERY · KNOW YOUR DATA Find sensitive data with eDiscovery Data explorer counts sensitive data. eDiscovery tells you where it is, and lets you combine it with age. We search sites and mailboxes for IP addresses, read the top 100, and find what is both sensitive and old. informasjonsbeskyttelse.no