Microsoft Purview: Data Loss Prevention - User Based Aggregation of DLP Alerts

From Microsoft's description: “This feature should consolidate related alert events into a single alert object to: Reduce alert noise, simplify investigation workflows, enhance contextual understanding of violations.”

Enable aggregation of DLP alerts based on common entities user even when multiple rules are matched. This feature should consolidate related alert events into a single alert object to: Reduce alert noise, simplify investigation workflows, enhance contextual understanding of violations.

Affected: Microsoft Purview

Related changes

• Microsoft Purview: Data Loss Prevention - User Based Aggregation of DLP Alerts · Data
• Microsoft Purview: Data Security Triage Agent in Data Loss Prevention - Reasoning Trace and Confidence Score for agent-triaged alerts · Data
• Microsoft Purview: Data Loss Prevention - Data Security Triage Agent summaries and categorizations for DLP alerts will be made available in DLP Alerts in Microsoft Defender XDR · Data
• Microsoft Purview: Data Loss Prevention – Block External Domain/User action in DLP for SharePoint/OneDrive · Data
• Microsoft Purview: Data Loss Prevention - Rule-based tagging and auto-resolution of alerts based on business needs of the customer. · Data
• Microsoft Purview: Data Loss Prevention - Data Loss Prevention to safeguard sensitive information from external web search in Microsoft 356 Copilot and Copilot Chat · Data

View at Microsoft → Copy summary