Your organization has a Microsoft 365 tenant with a user named John Gruber.
The CEO of your organization believes John Gruber may have sent email messages to one of your rivals with company secrets.
You must provide a way to review any emails sent by John Gruber to the rival, even those that were deleted after being sent.
Everything in a mailbox will be kept after a litigation hold is enabled. Including items deleted, modified, and in the archive mailbox.