Insider Risk Management analysts must manually create cases in the Purview portal after confirming alerts in the Defender XDR portal. New alert-related content will be added for 30 days post-case creation. The change impacts workflows and requires training. Public Preview starts mid-June 2025, with General Availability by late September 2025.
Applies to: Microsoft Purview
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).