Microsoft Purview: Data Security Investigations – Investigation templates for common data security scenarios

We're adding pre-built search templates to Microsoft Purview Data Security Investigations. Templates provide pre-configured search queries for common data security scenarios, allowing investigators to scope an investigation in just a few clicks instead of manually building queries. Users select a template, provide minimal inputs (such as a user or site), and the search is configured and ready to run.

Affected: Microsoft Purview

Related changes

• Microsoft Purview: Data Security Triage Agent in Data Loss Prevention - Reasoning Trace and Confidence Score for agent-triaged alerts · Data
• Microsoft Purview: Data Loss Prevention - Data Security Triage Agent summaries and categorizations for DLP alerts will be made available in DLP Alerts in Microsoft Defender XDR · Data
• Microsoft Purview: Endpoint Data Loss Prevention - Policy Sync & Device Health AI-Powered Investigation · Data
• Microsoft Purview: Endpoint Data Loss Prevention - Policy Sync & Device Health AI-Powered Investigation · Data
• Microsoft Purview: Data Security Posture Management-Data Security Posture Agent in DSPM · Data
• Microsoft Purview: Data Loss Prevention - Data Security for non-Microsoft connected apps · Data

View at Microsoft → Copy summary