Endpoint DLP evidence collection is now available as a data source in Data Security Investigations
Endpoint DLP evidence collection is now available as a data source in Data Security Investigations. Investigators can query data captured by endpoint Data Loss Prevention (DLP) policies on onboarded devices and add the associated content to an investigation scope for AI-powered analysis. This integration enables aggregate analysis of endpoint exfiltration events instead of per-alert triage. For more information, see Search, review, and refine results in Data Security Investigations.
Terms in this update
This is in the weekly digest for week 39 · What changed this week? →
More Purview updates
Data preparation in Data Security Investigations now runs automatically in the background as items are added to scope
Email and portal notifications for Data Security Investigations
Custom examinations in Data Security Investigations
New guidance for working with large audit search results in Data Security Investigations
OCR support in Data Security Investigations
A new Data Security Investigation Contributor role automatically provides Data Security Investigations access…
Text by Microsoft, from Microsoft's documentation. Features and dates may change. Terms and the timeline are added by 365Fanatic.
