51

SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

  • Upload
    sparked

  • View
    65

  • Download
    2

Embed Size (px)

DESCRIPTION

 

Citation preview

Page 1: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 2: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

End to End Microsoft eDiscovery in Office and Office 365Quentin ChristensenProgram ManagerMicrosoft

SPC396

Page 3: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

90% U.S. corporations currently engaged in litigation

147 Average number of active lawsuits for $1B+ companies

$1M Average per case cost of eDiscovery

Fulbright & Jaworski, Gartner

Page 4: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Identify and Preser

ve

Search and

Process

Review

Produce

eDiscovery Overview

Volume Relevance

Page 5: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

eDiscovery Challenges

Preservation

Search and reduction

Export

Page 6: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Demo

Quick Investigation

Page 7: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Quick Investigation

Early case assessment

Fast, real time search

Answers in minutes, not weeks

Page 8: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

eDiscovery simplified

Save time and money

Reduce risk

Key Takeaways

Advantages: in-place, real time, simple

Capabilities: In-Place Hold, Query, and Export

Page 9: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

eDiscovery as easy as 1, 2, 3.

In-Place Hold: protect content in-place in real time

Query: find up to date and relevant content quickly

Export: transfer content for review and production

1

2

3

Across: SharePoint, Exchange, Lync, and file shares on-premises and Office 365

Page 10: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Demo

Compliance Center and Hold

Page 11: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

In-place hold: content stays in Exchange and SharePoint, less storage space, lower costs, higher fidelity

Location and query based: hold entire mailboxes, SharePoint sites, or apply a query to hold less content

No impact to users: seamlessly create, edit, and delete without knowing its on hold

1. In-Place Hold

Page 12: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Lync ArchivingUser A Mailbox

Recoverable Items

Deletions

Deleted Items

Inbox

Versions

Purges

DiscoveryHolds

Server side archiving

All Lync modalities captured (PC, mobile, web, OWA)

User A on hold

Hold state synced

Lync archives content into Exchange mailboxes when user is on In-Place Hold

Includes instant messaging and meeting content

Page 13: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

SharePoint In-Place Hold

Admins cannot delete the hold data or site

Lists, feeds, documents, and pages are covered

Version history is preserved if versioning is on

Page 14: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

User A Mailbox

Recoverable Items

Deletions

Inbox

Purges

Versions

Audits

Deleted Items

DiscoveryHold

Calendar Logging

(6) Messages purged by query based hold

(5) Message Edited

(3) Message deleted

(4a) Message “purged” by user (Litigation Hold / Single Item Recovery)

ExchangeLifecycle

(4b) Message “purged” by user (In-Place Hold)

(1) Message delivered

(2) Message moved to Deleted Items

Page 15: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Demo

eDiscovery Center

Page 16: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Real time: no need to wait for indexing, always live and up to date

Reduce: proximity search, rich query syntax

Make decisions: query and source statistics help you analyze

2. Query

Page 17: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Keywords and PropertiesQuery Example Results

“Executive Briefing” Any content that contains the words “Executive Briefing” together, anywhere in the document, page, or message.

“Executive Briefing” AND “Summary”

Any content that contains the words “Executive Briefing” and “Summary”, anywhere in the document, page, or message

filename:budget Any file with budget in its filename, such as 2014 budget projections.docx, 2015 budget priorities.pptx, 2014 budget planning.xlsx, and so on.

filename:2014 budget filetype:xlsx

Excel worksheets that contain the phrase 2014 budget, such as “2014 budget planning.xlsx” and “2014 budget review.xlsx”.

Executive NEAR(20) Briefing Any content that contains the word “Executive” within 20 words of ”Briefing”.

Page 18: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Demo

Export

Page 19: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Easy: download from SharePoint, Exchange, and file shares whether on premises or in Office 365 all at once

EDRM XML Support: growing industry standard for data interchange, import into popular review tools

Take it offline: Native files, PSTs, pages as .MHT, lists and feeds as .CSV

3. Export

Page 20: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

EDRM XML 1.1 Support

20

Page 21: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Local Data

SharePoint

File Shares

Exchange

What about all my other data?Local Data

SharePoint Online

Exchange Online

PSTS Files PSTS Files

Exchange Online

Page 22: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Provide a sketch of the data flow(s)

Detail here...

 

http://go.microsoft.com/fwlink/p/?LinkId=314072

Page 23: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

eDiscovery as easy as 1, 2, 3.

In-Place Hold: protect content in-place in real time

Query: find up to date and relevant content quickly

Export: transfer content for review and production

1

2

3

Across: SharePoint, Exchange, Lync, and file shares on-premises and Office 365

Page 24: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

Key Takeaways

eDiscovery simplified

Save time and money

Reduce risk

Advantages: in-place, real time, simple

Capabilities: In-Place Hold, Query, and Export

Page 25: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

Page 26: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 27: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 28: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 29: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 30: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 31: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 32: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 33: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 34: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 35: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 36: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 37: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 38: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 39: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 40: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 41: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 42: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 43: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 44: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 45: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 46: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 47: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 48: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 49: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer
Page 50: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

MySPCSponsored by

connect. reimagine. transform.

Evaluate sessionson MySPC using yourlaptop or mobile device:myspc.sharepointconference.com

Page 51: SharePoint Highlights: Digitaal Forensisch Onderzoek met SharePoint, door Hans van der Meer

© 2014 Microsoft Corporation. All rights reserved. Microsoft, Windows, and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries.The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.