Microsoft Purview Insider Risk Management (IRM) alerts will integrate into Microsoft Defender XDR's unified alert queue, Advanced Hunting, Graph API, and Microsoft Sentinel. Rolling out from January to September 2025, admins must enable data sharing and assign permissions. IRM data supports enhanced investigation and external integrations.
Applies to: Microsoft Purview
Source: mc.merill.net — data via Merill Fernando's open archive (MIT).