Microsoft Purview: Data Security Investigations – analyze files tied to audit log activities
Speed up analysis of exfiltrated content by launching Data Security Investigations (DSI) from Unified Audit Log activity. In DSI, build your audit log query by specifying criteria such as time range, activities, users, and keywords. DSI then automatically pulls the associated files into the investigation (for example, UserA downloaded a file on 3/1/2026).<br>GA date: May CY2026<br>Preview date: April CY2026
Expected Release Date:
May CY2026<br>Preview date: April CY2026
