SC-401 Lab 12 – Perform Content Search

Use Microsoft Purview to perform targeted content searches across Microsoft 365 workloads for investigation and compliance.

Tools Used

Steps Taken

  1. Signed into Microsoft Purview portal as MOD Administrator.
  2. Navigated to Content Search → New Search.
  3. Defined search criteria including keywords, sender/recipient, and date range.
  4. Selected target locations: Exchange mailboxes, SharePoint sites, and OneDrive accounts.
  5. Ran the search and monitored progress.
  6. Downloaded results and reviewed exported content.
  7. Validated search accuracy and compliance relevance.

Outcome

Content search successfully performed and validated. Microsoft 365 now supports targeted investigations and eDiscovery workflows for compliance and security teams.

Certification Alignment

SC-401 Domain 2.2 – Implement Audit and Investigation Capabilities

Sandbox Link

Lab 12 – Perform Content Search