How to Start an Investigation?
Starting a Manual Investigation
Investigation Detail Page
Start an Investigation through/via a Reported Email
Q: Which operator (AND / OR) logic do the criteria (determined when starting the investigation) work among themselves?
Q: Can Investigation be started on all sources at the same time?
Q: What happens if the scope of the Investigation is large and is not completed within the specified time frame?
Q: What happens to the progress of Investigation if the user that the investigation was made on goes offline while the investigation is being done on the Outlook source?
Q: Can I read emails in the mailbox of a user while I am doing an investigation?
Q: Can emails that are permanently deleted be restored?
Q: How can I view the logs related to this module?
Q: Can Investigation be started for Outlook Desktop users that are 'offline'?