Electronic Discovery, or eDiscovery, is the discovery of content in electronic format for litigation or investigation. This typically requires identifying content spread across laptops, email servers, file servers, and many other sources.
The eDiscovery center is a SharePoint site collection used to perform electronic discovery actions. From this central location content can be discovered in the SharePoint farm, in Exchange Server 2013, on file shares, and in other SharePoint farms. A hold can be placed on SharePoint and Exchange content that is discovered.
The hold ensures that a copy of the content is preserved, while still allowing users to work with their content. Any new content that is created or added after it was put on hold will be discoverable, and will be preserved if it is deleted. When the specific items that are identified will have to be delivered, they can be exported in an industry-standard format.
The content that is exported by using a query is formatted according to the Electronic Data Reference Model (EDRM) specification so that it can be imported into a review tool. An export can include the following:
- Documents are exported from file shares. Documents and their versions can be exported from SharePoint 2013.
- If a list item is included in the query results, the whole list is exported as a comma-separated values (.csv) file.
- SharePoint pages, such as wiki pages or blogs, are exported as MIME HTML (.mht) files.
- Items in an Exchange Server 2013 mailbox, such as tasks, calendar entries, contacts, email messages and attachments are exported as a.pst file. If Lync conversations are archived in Exchange, those can be discovered and exported, too.
- Crawl log errors.
- An XML manifest that provides an overview of the exported information.