RM83965 - Microsoft Purview compliance portal: Insider Risk Management - Microsoft Defender for Endpoint alerts

Microsoft 365 Roadmap

Status

Launched

Release

General Availability
Preview

Last Updated

Aug 7, 2025

Published Jun 8, 2021

Platforms

Web

Service

Microsoft Purview

Tag

Launched
General Availability
Preview
Worldwide (Standard Multi-Tenant)

Cloud

Worldwide (Standard Multi-Tenant)

Summary

Enables you to import indicators from Microsoft Defender for Endpoint related to unapproved or malicious software installation or bypassing security controls. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, security and policy violations, and more. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Note: We are updating this item to reflect changes to this deployment. We appreciate your patience.

Description

Enables you to import indicators from Microsoft Defender for Endpoint related to unapproved or malicious software installation or bypassing security controls. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, security and policy violations, and more. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Note: We are updating this item to reflect changes to this deployment. We appreciate your patience.

GA date: June CY2025

Preview date: April CY2022