Hi

I have been tasked with finding all cardholder data in our tenant.

For SPO and onedrive I can search directly from content search (or ediscovery search)

This is useful because we can export items for further investigation, and most importantly, at some point I will be asked to purge some results.

I have managed to export the content explorer data for exchange using Export-ContentExplorerData powershell.

The resulting csv however isnt very useful in tems of matching items in Exchange.

The only 2 vaguely usefel fields are FileUrl, and FileName

FileName contains contextual data sometimes several lines long, and contonaong characters that screw up a KQL keyword search, and returns too many results.

The FileURL property seems to be a unique ID, but I cant seem to find this property anywhere else, especially in content search.

Has anyone else faced a simliar situation?

​HiI have been tasked with finding all cardholder data in our tenant.For SPO and onedrive I can search directly from content search (or ediscovery search)This is useful because we can export items for further investigation, and most importantly, at some point I will be asked to purge some results.I have managed to export the content explorer data for exchange using Export-ContentExplorerData powershell.The resulting csv however isnt very useful in tems of matching items in Exchange.The only 2 vaguely usefel fields are FileUrl, and FileNameFileName contains contextual data sometimes several lines long, and contonaong characters that screw up a KQL keyword search, and returns too many results. The FileURL property seems to be a unique ID, but I cant seem to find this property anywhere else, especially in content search. Has anyone else faced a simliar situation?  Read More

​