check before: 2026-05-01
Product:
Purview, Purview Data Loss Prevention
Platform:
Web, World tenant
Status:
In development
Change type:
Links:
Details:
Speed up analysis of exfiltrated content by launching Data Security Investigations (DSI) from endpoint Data Loss Prevention (DLP) alerts. In DSI, define your endpoint DLP query (for example, time range, users, and endpoints). DSI then automatically gathers the related files that triggered the alerts for review (for example, UserA downloaded a file on 3/1/2026).
Change Category:
XXXXXXX ... free basic plan only
Scope:
XXXXXXX ... free basic plan only
Release Phase:
General Availability, Preview
Created:
2026-03-13
updated:
2026-03-13
Public Preview Start Date
XXXXXXX ... free basic plan only
Docu to Check
XXXXXXX ... free basic plan only
MS workload name
XXXXXXX ... free basic plan only
summary for non-techies**
Microsoft Purview's Data Loss Prevention (DLP) alerts you to unauthorized data movements, while Data Security Investigations (DSI) helps investigate these alerts by gathering detailed information about the incident, such as involved files and access methods, to facilitate quick resolution and prevention of future incidents.
Direct effects for Operations**
Data Loss Prevention (DLP) Alert Management
Without proper preparation, the implementation of DSI may lead to an overwhelming number of alerts, causing delays in response times and potential data breaches.
- roles: IT Security Analyst, Compliance Officer
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity-blog/announcing-microsoft-purview-data-security-investigations/ba-p/3651230
User Experience During Investigations
If DSI is launched without adequate training or communication, users may experience confusion or frustration due to increased monitoring and potential false positives in alerts.
- roles: End User, IT Support Specialist
- references: https://techcommunity.microsoft.com/t5/security-compliance-identity-blog/announcing-microsoft-purview-data-security-investigations/ba-p/3651230
Configutation Options**
XXXXXXX ... paid membership only
Data Protection**
XXXXXXX ... paid membership only
IT Security**
XXXXXXX ... paid membership only
explanation for non-techies**
XXXXXXX ... free basic plan only
** AI generated content. This information must be reviewed before use.
a free basic plan is required to see more details. Sign up here
A cloudsocut.one plan is required to see all the changed details. If you are already a customer, choose login.
If you are new to cloudscout.one please choose a plan.
