MC1047912 - Microsoft Purview: New Purview Data Security Investigations (DSI) solution

Microsoft Purview Data Security Investigations (DSI) is a new AI-powered solution that enables data security teams to identify incident-related data, conduct deep content analysis, and mitigate risk within one unified solution.

This message is associated with Microsoft 365 Roadmap ID 485707.

When this will happen:

Public Preview: We will begin rolling out early April 2025 and expect to complete by mid-May 2025.

General Availability (Worldwide): We will begin rolling out mid-June 2025 and expect to complete by late July 2025.

How this will affect your organization:

DSI enables data security admins to efficiently identify incident-relevant content by searching their Microsoft 365 data estate to locate emails, Microsoft Teams messages, Microsoft Copilot prompts and responses, and documents.

After an admin scopes an investigation, DSI’s generative AI capabilities allow admins to gain deeper insights into the impacted data, revealing critical security risks and sensitive information. Investigative capabilities include the ability to categorize evidence, perform vector searches, and examine impacted data for security and sensitive data risks.

DSI visualizes correlations between investigation data, users, and their activities. To mitigate identified risks, DSI facilitates secure collaboration between partner teams. Post-investigation learnings can be used to refine existing policies to strengthen your organization's security practices.

Get started with DSI on the overview page with information on enrollment and enabling RBAC (role-based access control):

Categorize your data to identify highest risk items and plan mitigation actions accordingly:

Understand investigation progress and insights with the Investigation summary view:

What you need to do to prepare:

Learn more: Accelerate data security investigations with AI-powered deep content analysis | Microsoft Community Hub

When the Public Preview begins, we will update this post with new documentation.

Get started on the Purview DSI overview page (coming soon) to complete setup and get oriented in a few simple steps:

1. Enable access in Microsoft Purview > Permission for DSI admins, DSI investigators and DSI reviewers in your organization.
2. Complete the DSI first-run experience including:
   1. Enrolling your Purview subscription for non-AI storage and processing meter
   2. Enrolling for AI consumption using security compute units
3. Get started with your first investigation.