Merge pull request #50483 from MicrosoftDocs/NEW-purview-ediscovery-review-set

New purview ediscovery review set

Author: v-dirichards

learn-pr/wwl-sci/purview-ediscovery-review-set/create-manage-review-set.yml

@@ -0,0 +1,15 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.purview-ediscovery-review-set.create-manage-review-set
+title: Create and manage review sets in eDiscovery
+metadata:
+  title: Create and manage review sets in eDiscovery
+  description: "Create and manage review sets in eDiscovery."
+  ms.date: 05/15/2025
+  author: wwlpublish
+  ms.author: riswinto
+  ms.topic: unit
+azureSandbox: false
+labModal: false
+durationInMinutes: 8
+content: |
+  [!include[](includes/create-manage-review-set.md)]

learn-pr/wwl-sci/purview-ediscovery-review-set/export-reuse-review-set.yml

@@ -0,0 +1,15 @@
+### YamlMime:ModuleUnit
+uid: learn.wwl.purview-ediscovery-review-set.export-reuse-review-set
+title: Export and reuse review set content
+metadata:
+  title: Export and reuse review set content
+  description: "Export and reuse review set content."
+  ms.date: 05/15/2025
+  author: wwlpublish
+  ms.author: riswinto
+  ms.topic: unit
+azureSandbox: false
+labModal: false
+durationInMinutes: 6
+content: |
+  [!include[](includes/export-reuse-review-set.md)]

learn-pr/wwl-sci/purview-ediscovery-review-set/includes/create-manage-review-set.md

@@ -0,0 +1,120 @@
+In Microsoft Purview eDiscovery, **review sets** play a central role in managing the content you need to examine during a legal or compliance investigation. A review set is a static, organized collection of data that has been added to a case for deeper analysis.
+
+Review sets help you move from broad data collection to focused analysis. Because their contents are fixed once added, they preserve the integrity of your investigation. Review sets give legal and compliance teams a consistent workspace to search, filter, tag, and prepare content for export or further action.
+
+## Create a review set
+
+In Microsoft Purview eDiscovery, review sets are created as containers for holding static copies of content you want to analyze. You can create a review set on its own and add data later, or you can create one directly from a search.
+
+### Step 1: Create the review set
+
+To create a new review set:
+
+1. In your eDiscovery case, go to the **Review sets** tab.
+1. Select **Create review set**.
+1. Enter a name and optional description.
+1. Select **Add** to create your review set.
+
+At this point, the review set exists but doesn't contain any items.
+
+:::image type="content" source="../media/create-review-set.png" alt-text="Screenshot showing a newly created review set with no searches or data added." lightbox="../media/create-review-set.png":::
+
+> [!NOTE]
+> If you open the review set and go to the **Searches** tab, you can select **View searches** to jump to the Searches page. From there, follow the steps to add content.
+
+### Step 2: Add search results to the review set
+
+To add data to your review set:
+
+1. Go to the **Searches** tab for the case.
+1. Open the search that contains the results you want to review.
+1. Select **Add to review set** from the command bar.
+1. Choose whether to create a new review set or add to an existing one.
+1. Configure how content will be included:
+
+   - Choose which types of items to include (indexed, partially indexed)
+   - Decide how many document versions to collect
+   - Choose whether to include folders, list items, and attachments
+   - Optionally include conversations and access links
+1. Select **Add to review set** to begin processing.
+
+   :::image type="content" source="../media/add-to-review-set-from-search.png" alt-text="Screenshot showing the options when adding search results to a review set." lightbox="../media/add-to-review-set-from-search.png":::
+
+Once processing is complete, the data is visible in the review set and ready for analysis.
+
+### Review set behavior after creation
+
+After a review set is created, its contents are fixed. You can add more content over time by committing new searches, but you can't remove individual items once they're added.
+
+This behavior supports defensibility by ensuring that the review set remains a consistent, auditable snapshot of the data collected for investigation.
+
+## View and organize review sets
+
+From the **Review sets** tab, you can view all review sets in the case and organize them to make review easier. You can:
+
+- Filter and group existing sets
+- Customize the dashboard columns
+- Search for a specific review set
+- Download a .csv file with metadata
+
+Each row shows the name, size, creator, modified date, number of searches and exports, and any added description.
+
+If you're reviewing a long list, you can group the sets by the user who created or last modified them.
+
+## Open a review set
+
+Select a review set to open its summary page. This page includes:
+
+- **Overview tab**: Displays general details, including size, owner, and modification history
+- **Searches tab**: Shows each search added to the review set and its processing status
+- **Process manager tab**: Lists actions taken on the review set, such as exports, with details like status, duration, and who initiated the action
+
+You can also download a list of actions from the **Process manager** tab.
+
+## Start working with review set items
+
+After selecting **Open review set**, you're ready to begin analysis. From the command bar, you can:
+
+- Search across the content
+- Group and view items in a review set
+- Tag documents based on privilege, relevance, or other criteria
+- Run analytics
+- Export selected items
+- Add content to another review set
+- Create keyword summaries with Query Report (preview)
+
+   :::image type="content" source="../media/review-set-options.png" alt-text="Screenshot highlighting the options to work with a review set." lightbox="../media/review-set-options.png":::
+
+These actions help teams organize and evaluate content before deciding on next steps.
+
+## Understand review set structure
+
+Each review set displays high-level statistics and details that help you track and manage the content.
+
+- **Overview statistics** include:
+
+  - Total extracted documents
+  - Total processed items
+  - Failed extractions
+
+- **Load sets** show each batch of data added to the review set. You can view:
+
+  - Load date
+  - Source name (search, review set, or upload)
+  - Load ID
+  - Item count
+  - Processing status
+
+This information is helpful when reviewing content origins and the completeness of your data set.
+
+## Pagination settings
+
+By default, review set items appear in pages of 50. Use the navigation controls to move between pages or enter a page number directly. If you prefer to scroll through all content without breaks, go to **Manage** and select **Turn pagination off**.
+
+Review sets are where investigative teams do their most detailed analysis. By organizing content into review sets, applying tags, and using tools like analytics and export, you create a defensible, auditable process for handling sensitive data during legal or compliance matters.
+
+## Create and manage review sets interactive guide
+
+Use the **Create and manage review sets interactive guide** interactive guide to walk through creating a review set.
+
+[:::image type="content" source="../media/guide-create-manage-review-set.png" alt-text="Screenshot showing the opening page to the Create and manage review sets interactive guide." lightbox="../media/guide-create-manage-review-set.png":::](https://mslearn.cloudguides.com/guides/Create%20and%20manage%20review%20sets%20with%20Microsoft%20Purview%20eDiscovery?azure-portal=true)

learn-pr/wwl-sci/purview-ediscovery-review-set/includes/export-reuse-review-set.md

@@ -0,0 +1,90 @@
+After you review and tag content in a review set, the next step is often to export it for further processing or handoff. Exporting helps legal and compliance teams prepare documents for handoff, archive data outside of Microsoft Purview, or work with a smaller subset of items in another review set.
+
+Microsoft Purview eDiscovery gives you flexible export options, including ways to preserve redactions, include review tags, and control folder structure. You can also reuse selected content by moving it into another review set for separate review or analysis.
+
+## Export content from a review set
+
+To start an export:
+
+1. Open your case and go to the **Review sets** tab.
+1. Select the review set you want to export, then select **Open review set**.
+1. Select one or more items you want to export.
+1. From the command bar, select **Action** > **Export**.
+1. On the **Export** flyout page, configure your export settings.
+1. Select **Export** to begin the process.
+
+   :::image type="content" source="../media/export-review-set-configuration.png" alt-text="Screenshot showing the export panel and full configuration options to export items from a review set." lightbox="../media/export-review-set-configuration.png":::
+
+You can track the progress and download the exported content from **Process manager**.
+
+> [!NOTE]
+> Export jobs are retained for the life of the case, but you must download the content within 30 days of export completion.
+
+## Choose what to include in your export
+
+You can choose whether to export only selected items, items that match the current filter, or everything in the review set:
+
+- **Selected documents only**: Export just the items you've manually selected
+- **All filtered documents**: Export items based on your current search or filter
+- **All documents in the review set**: Export everything, regardless of filter or selection
+
+You can also expand the export to include related content:
+
+- **Associated family items**: Items like attachments that share the same FamilyId
+- **Associated conversation items**: Related messages from Teams or Viva Engage threads
+
+## Select your export format and type
+
+Depending on how you plan to use the exported data, choose from the following export types:
+
+- **Export item report only**: Generates a summary report without the actual items
+- **Export items with item report**: Exports documents along with a report
+
+When exporting items with a report, you can choose more options:
+
+- **Export redaction**: Includes redacted PDFs if redactions have been committed
+- **Export text files**: Provides extracted text versions of the files
+- **Export tags**: Includes review tags in the item report
+
+For messages, select the preferred format:
+
+- **Create PSTs for messages where possible**
+- **Create .msg files for messages**
+
+Choose PST if you're preparing content for Outlook review. Use MSG for more granular access to individual messages.
+
+You can also organize how content is structured in the export:
+
+- **Separate folders or PSTs by location**
+- **Include original folder structure**
+- **Condense paths to 259 characters**
+- **Assign friendly names to each item**
+
+Choose the export structure that works best for the review team or external recipients.
+
+## Reuse items in another review set
+
+Sometimes, you might want to isolate a group of reviewed items for further analysis. Instead of exporting and reimporting, you can send those items directly to another review set in the same case.
+
+To do this:
+
+1. In the original review set, select the items you want to reuse.
+1. Select **Action** > **Add to another review set**.
+1. Choose the target review set.
+1. Select whether to include:
+
+   - **Selected documents only**
+   - **All filtered documents**
+   - **All documents in the review set**
+1. Decide whether to include the original **metadata** and **tags**.
+1. Select **OK** to start the process.
+
+The process appears in the **Process manager** of the destination review set, where you can track completion.
+
+This approach is useful for running analytics on a smaller data set or separating different phases of review without duplicating effort.
+
+## Export data interactive guide
+
+Use the **Export data** interactive guide to walk through exporting search and review set data.
+
+[:::image type="content" source="../media/guide-export-data.png" alt-text="Screenshot showing the opening page to the Export data interactive guide." lightbox="../media/guide-export-data.png":::](https://mslearn.cloudguides.com/guides/Export%20data%20with%20Microsoft%20Purview%20eDiscovery?azure-portal=true)

learn-pr/wwl-sci/purview-ediscovery-review-set/includes/introduction.md

@@ -0,0 +1,14 @@
+Investigations that involve user data across Microsoft 365 can quickly become complex. After collecting search results, information security and legal teams need a consistent way to analyze and prepare that content. Reviewing data one item at a time is inefficient and can introduce risk. You need a workspace that supports structured review and defensible outcomes.
+
+Imagine you're handling a compliance case with thousands of emails, files, and chats. You need to isolate relevant items, apply legal review tags, run analytics to reduce redundancy, and prepare key documents for export. Without a way to organize this work, the process can stall or produce inconsistent results.
+
+This module shows how to manage content using review sets in Microsoft Purview eDiscovery. You'll create review sets, add and organize items, apply filters and tags, use analytics to prioritize review, and export or reuse data for further action.
+
+In this module, you learn how to:
+
+- Create and populate review sets
+- Search, filter, group, and tag review set items
+- Run analytics and apply built-in filters
+- Export or reuse content across review sets
+
+By the end, you'll know how to manage and work with review set content in a way that supports fast, consistent, and defensible investigations.

learn-pr/wwl-sci/purview-ediscovery-review-set/includes/query-keyword-reports.md

@@ -0,0 +1,42 @@
+After filtering content in a review set, it's common to run multiple keyword searches or KeyQL queries to isolate relevant items. But reviewing the results one by one doesn't give you the full picture. That's where the Query Report comes in.
+
+The **Query Report (preview)** helps legal and compliance teams compare the results of multiple saved queries in one place. You can see which queries return the most items, how large those items are, and how many different locations they come from. This helps prioritize review and supports early case assessment.
+
+## Generate a query report
+
+To create a query report:
+
+1. Open your case and go to the **Review sets** tab.
+
+1. Select the review set you want to analyze, then select **Open review set**.
+
+1. From the command bar, select **Actions** > **Query Report (preview)**.
+
+1. In the search box, enter your queries, one per line.
+
+   You can use simple keywords or full KeyQL expressions. For example:
+
+    `confidential` <br>
+    `confidential AND Project Infinity` <br>
+    `(((FileClass="Email") AND (InclusiveType=2 OR InclusiveType=1)) OR ((FileClass="Attachment") AND (UniqueInEmailSet="true")) OR ((FileClass="Document") AND (MarkAsRepresentative="Unique")) OR (FileClass="Conversations"))`
+
+1. Select **Generate report**.
+
+Each line of the report shows:
+
+- **Query**: The keyword or KeyQL expression used
+- **Locations with hits**: How many data sources contained matches
+- **Count**: Number of items returned
+- **Percentage**: Portion of the review set those items represent
+- **Size**: Total size of the matching items
+
+## View and download results
+
+Double-click a query line to open the filtered results. You can review individual items, view metadata, and see the plain text content. While you can't annotate or export from this view, it helps you understand what matched and why.
+
+To save the summary, select **Download report**. The report is saved as a .csv file with one row per query. This file can be shared with stakeholders or included in case documentation.
+
+:::image type="content" source="../media/query-report.png" alt-text="Screenshot showing a query report run with the option to download the report." lightbox="../media/query-report.png":::
+
+> [!NOTE]
+> Queries aren't saved when you exit the Query Report. If you plan to reuse the queries, save them in a separate document for reference.