Feed / Purview
mediumPurviewData Security Investigationsnew featurem365_message_center · Mar 21, 2026

(Updated) Microsoft Purview: Data Security Investigations – analyze files tied to endpoint DLP alerts

Microsoft Purview's Data Security Investigations now supports querying endpoint DLP events as a data source, enabling more comprehensive analysis of data loss prevention incidents. This enhancement strengthens compliance monitoring and security investigation capabilities for organizations using Microsoft Purview.

Services: Microsoft Purview. <p>Updated July 20, 2026: We have updated the timeline. Thank you for your patience. </p><p><strong>[Introduction]</strong></p><p>We’re introducing <strong>endpoint Data Loss Prevention (DLP) events</strong> as a <strong>queryable data source</strong> in <em>Data Security Investigations (…
View original article →
Compliance
GDPRHIPAASOCISO
Identity
authorizationidentity_governance
Security
threat_protectionvulnerability_managementcloud_security
Audience
adminsecurity_engineercompliance_officer
Environment
cloudhybrid
Ontology Topics
AZ-500SC-300
Classification confidence: 95%
Loading correlations…
(Updated) Microsoft Purview: Data Security Investigations – analyze files tied to endpoint DLP alerts | 365Forge