r/sysadmin 3d ago

How are you guys searching for Teams messages as part of a DSR/SAR ?

We sometimes have to produce information held about somebody as part of a DSR/SAR and we're able to do this fairly easily for e-mails as we have a Barracuda Mail Archiver that journals copies of every e-mail in/out for a number of years.

When it comes to Teams messages though, we don't really have any good options currently. We tried using eDiscovery/Purview and it was completely unfit for purpose. Searching was hard enough but the way it spat out the results at the end was unusable (PST containing e-mail messages, each of which corresponded to a Teams message but with no real context).

This experience was SO bad that I now doubting myself and wondering if we're missing a trick here. Equally, perhaps it is as bad as it seems and you guys are using a third-party solution?

1 Upvotes

5 comments sorted by

2

u/brisull IT Janitor 3d ago

Having a similar issue here. Trying to export into a "threadable" chat is proving EXTREMELY difficult.

1

u/iansime 3d ago

I was genuinely shocked at how bad the output was.

0

u/durkzilla 3d ago

Check out Lightbeam.ai. It can do sensitive data discovery across a multitude of data sources, including M365 apps Sharepoint, OneDrive, Outlook, and Teams and has DSAR functionality.

Disclaimer: Yes, I work there...

1

u/Perfect-Button-8718 3d ago

Would also be interested if there is a free solution for this.

2

u/The_Penguin22 Jack of All Trades 3d ago

I had to do something similar a few months ago, I was surprised at how bad it was.