Microsoft Purview Insider Risk Management will soon allow analysts to identify compromised user alerts in Microsoft Entra. The rollout starts mid-May 2025 (worldwide) and early-August 2025 (GCC, GCC High, DoD). Risk detections will be visible in the alert investigation experience but won't affect risk scores. No admin action is required.
Applies to: Microsoft Purview
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).