Microsoft Purview: Data Security Investigations – analyze files tied to audit log activities

Speed up analysis of exfiltrated content by launching Data Security Investigations (DSI) from Unified Audit Log activity. In DSI, build your audit log query by specifying criteria such as time range, activities, users, and keywords. DSI then automatically pulls the associated files into the investigation (for example, UserA downloaded a file on 3/1/2026). Product Release phase Preview Release date May CY2026Preview date: April CY2026 Platform Web Cloud Instance Worldwide (Standard Multi-Tenant) Created 2026-03-12 23:00:54Z Roadmap ID 558548 Roadmap Link https://www.microsoft.com/microsoft-365/roadmap?id=558548

The post Microsoft Purview: Data Security Investigations – analyze files tied to audit log activities appeared first on M365 Admin.