New-SupervisoryReviewRule

{{ Fill CcsiDataModelOperator Description }}

The Condition parameter specifies the conditions and exceptions for the rule. This parameter uses the following syntax:

• User or group communications to supervise: "((Reviewee:<emailaddress1>) -OR (Reviewee:<emailaddress2>)...)". Exceptions use the syntax "(NOT((Reviewee:<emailaddress1>) -OR (Reviewee:<emailaddress2>)...))".
• Direction: "((Direction:Inbound) -OR (Direction:Outbound) -OR (Direction:Internal))".
• Message contains words: "((<Word1orPhrase1>) -OR (<Word2orPhrase2>)...)". Exceptions use the syntax "(NOT((<Word1orPhrase1>) -OR (<Word2orPhrase2>)...))".
• Any attachment contains words: "((Attachment:<word1>) -OR (Attachment:<word2>)...)". Exceptions use the syntax "(NOT((Attachment:<word1>) -OR (Attachment:<word2>)...))".
• Any attachment has the extension: "((AttachmentName:.<extension1>) -OR (AttachmentName:.<extension2>)...)". Exceptions use the syntax "(NOT((AttachmentName:.<extension1>) -OR (AttachmentName:.<extension2>)...))".
• Message size is larger than: "(MessageSize:<size in B, KB, MB or GB>)". For example "(MessageSize:300KB)". Exceptions use the syntax "(NOT(MessageSize:<size in B, KB, MB or GB>))".
• Any attachment is larger than: "(AttachmentSize:<size in B, KB, MB or GB>)". For example "(AttachmentSize:3MB)". Exceptions use the syntax "(NOT(AttachmentSize:<size in B, KB, MB or GB>))".
• Parentheses ( ) are required around the whole filter.
• Separate multiple conditions or exception types with the AND operator. For example, "((Reviewee:[email protected]) -AND (AttachmentSize:3MB))".

The Confirm switch specifies whether to show or hide the confirmation prompt. How this switch affects the cmdlet depends on if the cmdlet requires confirmation before proceeding.

• Destructive cmdlets (for example, Remove-* cmdlets) have a built-in pause that forces you to acknowledge the command before proceeding. For these cmdlets, you can skip the confirmation prompt by using this exact syntax: -Confirm:$false.
• Most other cmdlets (for example, New-* and Set-* cmdlets) don't have a built-in pause. For these cmdlets, specifying the Confirm switch without a value introduces a pause that forces you acknowledge the command before proceeding.

{{ Fill ContentContainsSensitiveInformation Description }}

{{ Fill ContentMatchesDataModel Description }}

{{ Fill ContentSources Description }}

{{ Fill DayXInsights Description }}

{{ Fill ExceptIfFrom Description }}

{{ Fill ExceptIfRecipientDomainIs Description }}

{{ Fill ExceptIfRevieweeIs Description }}

{{ Fill ExceptIfSenderDomainIs Description }}

{{ Fill ExceptIfSentTo Description }}

{{ Fill ExceptIfSubjectOrBodyContainsWords Description }}

{{ Fill From Description }}

{{ Fill IncludeAdaptiveScopes Description }}

{{ Fill InPurviewFilter Description }}

The Name parameter specifies the unique name for the supervisory review rule. The name can't exceed 64 characters. If the value contains spaces, enclose the value in quotation marks (").

{{ Fill Ocr Description }}

The Policy parameter specifies the supervisory review policy that's assigned to the rule. You can use any value that uniquely identifies the policy. For example:

• Name
• Distinguished name (DN)
• GUID

The SamplingRate parameter specifies the percentage of communications for review. If you want reviewers to review all detected items, use the value 100.

{{ Fill SentTo Description }}

The WhatIf switch doesn't work in Security & Compliance PowerShell.