Microsoft Purview: Data Loss Prevention – Enrich Defender alerts Graph API with DLP event data

Enhance current API infrastructure to provide easy and simple way for customers to export data to integrate with SIEM tools, create automated workflows and generate customizable reports. Today alert data is present in Graph API and DLP rule match event details are present in Management API. This work enriches the graph API with DLP event data to make correlation and integration easy for customers.

Affected: Microsoft Purview

Related changes

• Microsoft Purview: Data Loss Prevention - Data Security Triage Agent summaries and categorizations for DLP alerts will be made available in DLP Alerts in Microsoft Defender XDR · Data
• Microsoft Purview: Data Security Triage Agent in Data Loss Prevention - Reasoning Trace and Confidence Score for agent-triaged alerts · Data
• Microsoft Purview: Data Loss Prevention - User Based Aggregation of DLP Alerts · Data
• Microsoft Purview: Data Loss Prevention - Rule-based tagging and auto-resolution of alerts based on business needs of the customer. · Data
• Microsoft Purview: Data Loss Prevention - Data Loss Prevention to safeguard sensitive information from external web search in Microsoft 356 Copilot and Copilot Chat · Data
• Microsoft Purview compliance portal: Data Loss Prevention - DLP Policy Tip Support in Outlook for Mac · Data

View at Microsoft → Copy summary