| title | caseInvestigation resource type |
|---|---|
| description | Represents an audit record for eDiscovery case investigation events. |
| author | palakagrawaljk |
| ms.subservice | security |
| ms.localizationpriority | medium |
| doc_type | resourcePageType |
| ms.date | 03/05/2026 |
| toc.title | Case investigation |
Namespace: microsoft.graph.security
[!INCLUDE beta-disclaimer]
Represents an audit record for eDiscovery case investigation events. This resource captures information about investigation activities within eDiscovery cases, including evidence collection, analysis, and review operations.
Inherits from microsoft.graph.security.auditData. The audit data for this record type is returned as the auditData property in an auditLogRecord.
None.
None.
The following JSON representation shows the resource type.
{
"@odata.type": "#microsoft.graph.security.caseInvestigation"
}