How to do content search in Office 365

How to do content search in Office 365

Office 365 content search feature helps you keep an eye on the emails sent and received by your organization. Though the Office 365 Security & Compliance Center has this capability, it falls short in some of the areas. 

For example, pattern-based searches to identify credit card numbers, social security numbers and other personally identifiable information (PII) that follow a regular pattern (REGEX pattern) cannot be done. Also, the content searches cannot be scheduled to run automatically.

O365 Manager Plus' mailbox content search allows you to:

  • Search multiple mailboxes: Search across all or selected mailboxes in your Office 365 setup in a single click.

  • Perform condition-based searches: Set multiple conditions to filter out the emails you don’t need to view. Eg: Emails that have the term 'Free download' in the Subject and has attachments. 

  • Rule-based filters: Create rules to identify specific emails. E.g: Emails read by users with the term 'Free download' in the Subject and has attachments.

  • Perform pattern-based searches: Use RegEx and commonly used phrases to identify emails with personal information.

  • Automate searches: Create search profiles to look through mailboxes at specified intervals automatically.

  • Create alerts: Configure detailed email alerts about automated search results.

Steps to perform search operation  

    1. Go to the Content Search tab.

    2. In the Select Mailbox field, use + to select the mailboxes that you need to search.

    3. Set the Search Criteria. Using the + option, you can set multiple conditions. Eg: Subject - Contains - Free download

    4. Click Search.

Steps to create a search profile  

If you want the tool to perform the search at regular intervals and share the search results via email, you need to create a search profile.

    1. Go to the Settings tab.

    2. Navigate to Configuration → Search Configuration → Content Search profiles in the left pane.

    3. Click on Advanced Options, if you want to configure email notification.

    4. Select the Email alerts corresponding to this profile check box.

    5. Select the Notification Template using the + option.

    6. From the Notify On drop-down, select when the admin should be notified.

    • New Mails - When a new email matching the search criteria is found.

    • Moved Mails - When an existing email matching the search criteria is moved from one parent folder to another parent folder. 

    • Deleted Mails - When an email matching the search criteria is deleted.


    7. Choose the Include Event Details option, if the details on the result must also be included in the email.

    8. Click Add.

 

Read more about the Office 365 content search feature here.


      • Sticky Posts

      • [KB] Manage Microsoft Teams with O365 Manager Plus

        Just released earlier this year, Microsoft Teams a chat-based workspace in Office 365 is the latest collaboration tool from Microsoft.   With Microsoft Teams, you can exchange messages and share files of any type. Though it may sound attractive, that file sharing feature turns ugly when highly confidential or malicious files are shared by accident or on purpose. In addition to Teams, third-party applications being integrated with Teams must also be monitored for obvious security reasons.Thankfully,
      • [KB] Office 365 Auditing : 4 activities that you should never miss

        Office 365 auditing is an effective way to get insights about user activities, and insider threats. Among the plethora of activities to be audited, there are four must-audit activities, that help you to identify the most common attacks like, brute-force attack, insider attack, elevation of privilege attack, etc. Below are those four important activities that must be audited:   User accesses: Know who is accessing your Office 365 subscription, when, and from where. By establishing a baseline of normal
      • [KB] Office 365 Group Membership Management

          Groups are an easy way to send emails or assign permissions to users collectively. When new employees join your organization, all you have to do is add them to appropriate groups to grant them access to the required resources. Most of the time there will be multiple groups to which the new users must be added. But, the Office 365 portal does not have a provision to add users to multiple groups in one go. And, that's why you need a comprehensive Office 365 management solution that can fill in all
      • Office 365 mailbox delegation -2

        In the previous post, we saw how to generate a report on Office 365 mailbox delegates and how to manage them in bulk easily with O365 Manager Plus. This week we will see how to audit the activities of mailbox delegates easily with O365 Manager Plus. Audit activities of mailbox delegates O365 Manager Plus provides a default audit profile called Activities by Mailbox Delegates which provides one click access to the required audit data. Note: Auditing must be enabled for mailboxes to view the audit
      • [KB] Office 365 mailbox delegation - 1

        In Exchange Online you can grant permission on any user's mailbox to other users to enable them to access the mailbox (the Full Access permission), or send email messages that appear to come from the mailbox (the Send As or Send on Behalf permissions). The users who are assigned these permissions on other mailboxes are called delegates. This article will explain how to grant permissions to users on other users' mailboxes, generate a report on all mailbox delegates. Reports on mailbox delegates O365

                        New to ADSelfService Plus?