Message CenterUpdated messageNew featureUser impactAdmin impact

MC1258000 — Microsoft Purview: Data Security Investigations – analyze files tied to endpoint DLP alerts

MC1258000Microsoft PurviewstayInformedUpdated: 24 August 2026

Microsoft Purview’s Data Security Investigations will add endpoint Data Loss Prevention (DLP) events as a queryable source, enabling admins to analyze related files automatically. Rollout occurs June to September 2026, enhancing investigation efficiency without user impact or required admin action.

Open in Message Center View in the live feed

Applies to: Microsoft Purview

Source: mc.merill.net — data via Merill Fernando's open archive (MIT).