Content Search in Purview eDiscovery
A Purview eDiscovery capability that searches Microsoft 365 locations such as mailboxes and sites to find files and emails matching specified criteria.
Microsoft Purview eDiscovery’s Content Search lets administrators query Exchange mailboxes, SharePoint sites, OneDrive accounts, and Teams content at once using keywords, Boolean operators, date ranges, and sender or recipient conditions. Results can be previewed or exported for legal review, making it an early step in many compliance investigations. The key exam distinction is scope versus action: Content Search only locates data, while the broader eDiscovery workflows add hold, collection, review, and export stages. Confusing Content Search with a legal hold is a common mistake, because searching a mailbox does not preserve its contents from deletion.
PlayPrepHQ study notes are written and reviewed against primary exam sources. How we create & review content →