Message CenterUpdated messageNew featureUser impactAdmin impact

MC1258000 — Microsoft Purview: Data Security Investigations – analyze files tied to endpoint DLP alerts

MC1258000Microsoft PurviewstayInformedUpdated: 18 June 2026

Microsoft Purview’s Data Security Investigations now includes endpoint Data Loss Prevention (DLP) events as a queryable source, enabling admins to analyze files linked to DLP alerts using AI tools. Rollout occurs June–July 2026, with no user impact or required admin action. This enhances investigation efficiency and compliance monitoring.

Open in Message Center View in the live feed
Applies to: Microsoft Purview
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).