M365 Archive
Back to latest version
You're viewing a historical snapshot from May 19, 2026. This is not the latest version.

Metadata at May 19, 2026

Roadmap ID

558547

View in M365 Roadmap

Last Updated

May 19, 2026

Published Mar 12, 2026

Status

In development

Release

General Availability
Preview

Platforms

Web

Service

Microsoft Purview

Tag

In development
General Availability
Preview
Worldwide (Standard Multi-Tenant)

Cloud

Worldwide (Standard Multi-Tenant)
View the latest version See what changed since this version

RM558547 - Microsoft Purview: Data Security Investigations – analyze files tied to endpoint DLP alerts

Microsoft 365 Roadmap

What changed since this version

removed textadded text

Speed up analysis of exfiltrated content by launching Data Security Investigations (DSI) from endpoint Data Loss Prevention (DLP) alerts. In DSI, define your endpoint DLP query (for example, time range, users, and endpoints). DSI then automatically gathers the related files that triggered the alerts for review (for example, UserA downloaded a file on 3/1/2026).

GA date: JuneJuly CY2026

Preview date: June CY2026

Snapshot from May 19, 2026

Speed up analysis of exfiltrated content by launching Data Security Investigations (DSI) from endpoint Data Loss Prevention (DLP) alerts. In DSI, define your endpoint DLP query (for example, time range, users, and endpoints). DSI then automatically gathers the related files that triggered the alerts for review (for example, UserA downloaded a file on 3/1/2026).

GA date: June CY2026

Preview date: June CY2026