Microsoft Purview compliance portal: eDiscovery - Review set query report

🚨 The Signal: Microsoft Purview eDiscovery now offers a 'hit-by-term' report for review sets. This allows security and legal teams to quickly identify the volume of items matching specific KQL queries, improving data analysis during investigations.

The Impact

eDiscovery administrators are affected, gaining better visibility into data relevance for investigations, reducing manual effort and improving accuracy.

• eDiscovery Administrators: Reduced time to identify relevant data for investigations.
• Legal Teams: Improved accuracy in assessing data responsiveness to legal holds.
• Compliance Officers: Enhanced ability to demonstrate due diligence in data discovery.
• Security Teams: Better insights into data exposure related to specific terms.

The Action

1. Navigate to Microsoft Purview compliance portal > eDiscovery (Premium) > Cases.
2. Select an existing case and go to the 'Review sets' tab.
3. Open a review set and run a KQL query.
4. Locate the option to 'Generate hit-by-term report' for the query results.
5. Download and analyse the generated report.

Domain: Purview · Impact: low · Workload: Microsoft Purview