To access and export encrypted files, the user performing the search/export must be assigned the RMS Decrypt role, which happens by default for the eDiscovery Manager role group within Microsoft 365.

Enterprise cloud services like Microsoft 365 leave enterprises open to ransomware threat actors who want to encrypt files saved in SharePoint Online and OneDrive libraries, researchers warn. The new ...