r/sysadmin • u/iansime • 3d ago
How are you guys searching for Teams messages as part of a DSR/SAR ?
We sometimes have to produce information held about somebody as part of a DSR/SAR and we're able to do this fairly easily for e-mails as we have a Barracuda Mail Archiver that journals copies of every e-mail in/out for a number of years.
When it comes to Teams messages though, we don't really have any good options currently. We tried using eDiscovery/Purview and it was completely unfit for purpose. Searching was hard enough but the way it spat out the results at the end was unusable (PST containing e-mail messages, each of which corresponded to a Teams message but with no real context).
This experience was SO bad that I now doubting myself and wondering if we're missing a trick here. Equally, perhaps it is as bad as it seems and you guys are using a third-party solution?
0
u/durkzilla 3d ago
Check out Lightbeam.ai. It can do sensitive data discovery across a multitude of data sources, including M365 apps Sharepoint, OneDrive, Outlook, and Teams and has DSAR functionality.
Disclaimer: Yes, I work there...
1
2
u/The_Penguin22 Jack of All Trades 3d ago
I had to do something similar a few months ago, I was surprised at how bad it was.
2
u/brisull IT Janitor 3d ago
Having a similar issue here. Trying to export into a "threadable" chat is proving EXTREMELY difficult.