M365 Archive
Back to latest version
You're viewing a historical snapshot from Mar 12, 2026. This is not the latest version.

Metadata at Mar 12, 2026

Roadmap ID

558547

View in M365 Roadmap

Published

Mar 12, 2026

Status

In development

Release

General Availability
Preview

Platforms

Web

Service

Microsoft Purview

Tag

In development
General Availability
Preview
Worldwide (Standard Multi-Tenant)

Cloud

Worldwide (Standard Multi-Tenant)
View the latest version See what changed since this version

RM558547 - Microsoft Purview: Data Security Investigations – analyze files tied to endpoint DLP alerts

Microsoft 365 Roadmap

What changed since this version

removed textadded text

Speed up analysis of exfiltrated content by launching Data Security Investigations (DSI) from endpoint Data Loss Prevention (DLP) alerts. In DSI, define your endpoint DLP query (for example, time range, users, and endpoints). DSI then automatically gathers the related files that triggered the alerts for review (for example, UserA downloaded a file on 3/1/2026).

GA date: MayJune CY2026

Preview date: AprilJune CY2026

Snapshot from Mar 12, 2026

Speed up analysis of exfiltrated content by launching Data Security Investigations (DSI) from endpoint Data Loss Prevention (DLP) alerts. In DSI, define your endpoint DLP query (for example, time range, users, and endpoints). DSI then automatically gathers the related files that triggered the alerts for review (for example, UserA downloaded a file on 3/1/2026).

GA date: May CY2026

Preview date: April CY2026