560326 – Microsoft Purview: Data Security Investigations – Investigation templates for common data security scenarios

Product:

Purview, Purview Communication Compliance

Platform:

Web, World tenant

Status:

In development

Change type:

Links:

MC1384427

Details:

We're adding pre-built search templates to Microsoft Purview Data Security Investigations. Templates provide pre-configured search queries for common data security scenarios, allowing investigators to scope an investigation in just a few clicks instead of manually building queries. Users select a template, provide minimal inputs (such as a user or site), and the search is configured and ready to run.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:
General Availability

Created:
2026-04-17

updated:
2026-04-17

Docu to Check

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Increased Investigation Time
Without preparation, users may struggle to adapt to the new templates, leading to longer investigation times as they learn to use the new system.
   - roles: Data Security Analyst, Compliance Officer
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-security-investigations/ba-p/3651230

User Frustration
If users are not trained on the new templates, they may experience frustration due to the inability to effectively utilize the new features, impacting their productivity.
   - roles: Data Security Analyst, IT Support Specialist
   - references: https://techcommunity.microsoft.com/t5/security-compliance-identity/microsoft-purview-data-security-investigations/ba-p/3651230

Configutation Options**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

XXXXXXX ... free basic plan only