- Create a Case – eDiscovery (Standard) – Microsoft Purview
You will require the role eDiscovery Manager or eDiscovery Administrator
- Create New Search
Suggestion: For the case name, enter the accounts name in the search & For the description, Enter a service request number #HACKERS001 Requestor : [Name] – Account: [Name] – Export OneDrive/SharePoint/Teams
- Set the Locations to Search
- Define conditions
Note : Leave blank if you want to pull all records. Add some buzzwords to pull a search containing the words
- Review and Submit
Wait while the submission is running
You can see a sample of the finding while the submission is running.