Skip to content

Glossary: Logs and Data Sources for Investigations

Legal hold

Also written: litigation hold, hold

An order from legal to keep all related data and suspend normal deletion when a lawsuit or investigation is likely. After a customer threatened to sue, Alex suspended Kettle & Crane's log deletion jobs.

Where the book teaches it

Related terms

Legal (stakeholder)Rotated logsRetention