Search & investigation

This section is all about finding certain types of content or behaviors. It can be useful for monitoring ongoing policy compliance and responding to incidents as needed. Subsections include Content search, Audit log search, eDiscovery (which is basically Content search by another name), and Productivity app discovery.

Content search

Content search replaces much of the functionality that was formerly only available through the eDiscovery center in SharePoint Online. With it, you can specify queries for specific keywords and other criteria, to help you identify potentially sensitive or inappropriate disclosure of information.

Over the years, we've used Content search and eDiscovery tools to help security officers (sometimes named FSOs) and their organizations with a variety of security-related matters. For example, some businesses subject to ITAR regulations (including foreign companies doing business with the US federal government) may be required to track emails between...