thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Operations · Intermediate

E-Discovery

The process of identifying, preserving, collecting, reviewing and producing electronically stored information for legal proceedings.

Definition

E-discovery follows models such as the Electronic Discovery Reference Model (EDRM), covering information governance, identification, preservation, collection, processing, review, analysis, production and presentation. Tools search, deduplicate and tag ESI. Microsoft Purview eDiscovery is a common enterprise tool.

Example

Searching all Microsoft 365 mailboxes for messages relating to a contract dispute.

Exam tip

E-discovery is legal-process driven; legal hold is the preservation step within it.

Related terms