M365 Archive
Back to latest version
You're viewing a historical snapshot from Jun 18, 2026. This is not the latest version.

Metadata at Jun 18, 2026

Roadmap ID

558547

View in M365 Roadmap

Last Updated

Jun 18, 2026

Published Mar 12, 2026

Status

In development

Release

General Availability
Preview

Platforms

Web

Service

Microsoft Purview

Tag

In development
General Availability
Preview
Worldwide (Standard Multi-Tenant)

Cloud

Worldwide (Standard Multi-Tenant)
View the latest version See what changed since this version

RM558547 - Microsoft Purview: Data Security Investigations – analyze files tied to endpoint DLP alerts

Microsoft 365 Roadmap

What changed since this version

removed textadded text

Speed up analysis of exfiltrated content by launching Data Security Investigations (DSI) from endpoint Data Loss Prevention (DLP) alerts. In DSI, define your endpoint DLP query (for example, time range, users, and endpoints). DSI then automatically gathers the related files that triggered the alerts for review (for example, UserA downloaded a file on 3/1/2026).

GA date: JulyAugust CY2026

Preview date: June CY2026

Snapshot from Jun 18, 2026

Speed up analysis of exfiltrated content by launching Data Security Investigations (DSI) from endpoint Data Loss Prevention (DLP) alerts. In DSI, define your endpoint DLP query (for example, time range, users, and endpoints). DSI then automatically gathers the related files that triggered the alerts for review (for example, UserA downloaded a file on 3/1/2026).

GA date: July CY2026

Preview date: June CY2026