{"id":58705,"date":"2025-05-22T11:22:55","date_gmt":"2025-05-22T09:22:55","guid":{"rendered":"https:\/\/www.schneider.im\/?p=58705"},"modified":"2025-05-22T18:41:19","modified_gmt":"2025-05-22T16:41:19","slug":"microsoft-purview-data-security-investigations-mitigate-sensitive-data-exposure","status":"publish","type":"post","link":"https:\/\/www.schneider.im\/lu\/microsoft-purview-data-security-investigations-mitigate-sensitive-data-exposure\/","title":{"rendered":"Microsoft Purview Data Security Investigations: Mitigate sensitive data exposure"},"content":{"rendered":"<p style=\"text-align: justify;\">Effective May 2025, <strong>Microsoft Purview Data Security Investigations<\/strong> (DSI), a solution for <strong>rapidly identifying and mitigating risks from sensitive data exposure<\/strong>, is in <strong>public preview<\/strong>. Administrators will need to activate <a href=\"https:\/\/www.schneider.im\/lu\/microsoft-purview-pay-as-you-go-meters-protecting-ai-apps-and-agents\/\">Purview PAYG billing<\/a> and provision Security Compute Units to use this feature.<\/p>\n<p style=\"text-align: justify;\"><img decoding=\"async\" class=\"aligncenter size-full wp-image-58710\" src=\"https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations.jpg\" alt=\"\" width=\"686\" height=\"386\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations.jpg 686w, https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-500x281.jpg 500w, https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-150x84.jpg 150w\" sizes=\"(max-width: 686px) 100vw, 686px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>The Need for Data Security Investigations (DSI)<\/strong><\/h2>\n<p style=\"text-align: justify;\"><strong>Data breaches<\/strong> involving <strong>stolen credentials<\/strong> take an average of <strong>292 days to identify and contain<\/strong>. During this period, organizations struggle to <strong>understand their overall risk<\/strong>, leading to inefficient workflows, labor-intensive data reviews, and increased costs. Additionally, <strong>moving impacted data<\/strong> for analysis or sharing evidence with stakeholders can <strong>expose or leak sensitive information<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>Introducing Purview Data Security Investigations<\/strong><\/h2>\n<div style=\"width: 800px;\" class=\"wp-video\"><video class=\"wp-video-shortcode\" id=\"video-58705-1\" width=\"800\" height=\"450\" poster=\"https:\/\/www.schneider.im\/media\/2024\/12\/SCHNEIDER-IT-MANAGEMENT-2024-12-11-Update-Website-Microsoft-Purview-Audit.jpg\" preload=\"metadata\" controls=\"controls\"><source type=\"video\/mp4\" src=\"https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-19-Update-Microsoft-Purview-Data-Security-Investigations.mp4?_=1\" \/><a href=\"https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-19-Update-Microsoft-Purview-Data-Security-Investigations.mp4\">https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-19-Update-Microsoft-Purview-Data-Security-Investigations.mp4<\/a><\/video><\/div>\n<p style=\"text-align: justify;\"><strong>Microsoft Purview Data Security Investigations (DSI)<\/strong> is a <strong>unified solution<\/strong> that <strong>enables data security teams to identify incident-related data, investigate it with AI-powered deep content analysis, and mitigate risks within one platform.<\/strong> DSI builds on Microsoft Purview\u2019s existing Data Security portfolio, including information protection, data loss prevention, and insider risk management solutions. <strong>DSI will continue to evolve<\/strong>, with <strong>future features<\/strong> including the <strong>ability to purge overshared risky files and more<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>Key Benefits of DSI<\/strong><\/h2>\n<ul style=\"text-align: justify;\">\n<li><strong>AI-Powered Analysis<\/strong>: DSI uses generative AI to rapidly analyze data, pinpointing major risks and categorizing impacted data to understand incident severity.<\/li>\n<li><strong>Efficient Risk Mitigation<\/strong>: AI helps identify security risks within impacted data, such as credentials, network risks, or evidence of threat actor discussions.<\/li>\n<li><strong>Proactive Data Hygiene<\/strong>: DSI can be used to examine datasets for sensitive information or security risks, helping prevent data security incidents.<\/li>\n<li><strong>Vector-Based Semantic Search<\/strong>: This feature allows querying impacted data to discover assets related to specific subjects, even if keywords are missing.<\/li>\n<\/ul>\n<h2 style=\"text-align: justify;\"><strong><img decoding=\"async\" class=\"aligncenter size-large wp-image-58714\" src=\"https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-800x459.png\" alt=\"\" width=\"800\" height=\"459\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-800x459.png 800w, https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-500x287.png 500w, https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-150x86.png 150w, https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-768x441.png 768w, https:\/\/www.schneider.im\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations.png 1002w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/strong><\/h2>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>How DSI Works<\/strong><\/h2>\n<ul style=\"text-align: justify;\">\n<li><strong>Incident Detection<\/strong>: When a data breach occurs, DSI enables the security team to search the Microsoft 365 data estate for incident-relevant emails, Teams messages, Copilot prompts, and documents.<\/li>\n<li><strong>AI Analysis<\/strong>: DSI\u2019s AI capabilities categorize impacted data and identify high-risk assets, such as credentials and sensitive documents.<\/li>\n<li><strong>Risk Visualization<\/strong>: DSI visualizes correlations between impacted data, users, and their activities, providing critical context for mitigation.<\/li>\n<li><strong>Secure Collaboration<\/strong>: DSI facilitates secure collaboration between partner teams to address identified risks, such as resetting compromised accounts.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>Integration with Existing Tools<\/strong><\/h2>\n<p style=\"text-align: justify;\"><strong>DSI integrates with Microsoft Defender XDR and Microsoft Purview Insider Risk Management<\/strong>, which allows for <strong>pre-scoped data security investigations<\/strong> to be launched directly from these tools. This integration provides the Security Operations Center (SOC) with <strong>visibility into the impact of security incidents on data<\/strong>, enabling better prioritization based on data sensitivity and severity.<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>More information<\/strong><\/h2>\n<p>Learn <strong>how to get started<\/strong>: <a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/data-security-investigations-get-started\">https:\/\/learn.microsoft.com\/en-us\/purview\/data-security-investigations-get-started<\/a>.<\/p>\n<p style=\"text-align: justify;\"><strong>\u00a0<\/strong><\/p>\n<h2 style=\"text-align: justify;\"><strong>Get help from the experts in licensing<\/strong><\/h2>\n<p><img decoding=\"async\" class=\"aligncenter size-large wp-image-56285\" src=\"https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-800x533.jpg\" alt=\"\" width=\"800\" height=\"533\" srcset=\"https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-800x533.jpg 800w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-500x333.jpg 500w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-150x100.jpg 150w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-768x512.jpg 768w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-1536x1024.jpg 1536w, https:\/\/www.schneider.im\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-2048x1365.jpg 2048w\" sizes=\"(max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify;\"><strong>Feel free to <\/strong><a href=\"https:\/\/www.schneider.im\/contact\/\"><strong>reach out to us<\/strong><\/a> to <strong>get expert licensing consultancy regarding Microsoft Purview<\/strong>. We show you the<strong> best options<\/strong> for <strong>your business case<\/strong> in order to help you compare all your options and to make an informed decision.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Effective May 2025, Microsoft Purview Data Security Investigations (DSI), a solution for rapidly identifying and mitigating risks from sensitive data exposure, is in public preview. Administrators will need to activate Purview PAYG billing and provision Security Compute Units to use this feature. &nbsp; The Need for Data Security Investigations (DSI) Data breaches involving stolen credentials [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":33016,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[248,573],"tags":[],"class_list":["post-58705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-azure","category-microsoft-purview"],"_links":{"self":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts\/58705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/comments?post=58705"}],"version-history":[{"count":6,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts\/58705\/revisions"}],"predecessor-version":[{"id":58815,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/posts\/58705\/revisions\/58815"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/media\/33016"}],"wp:attachment":[{"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/media?parent=58705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/categories?post=58705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.schneider.im\/lu\/wp-json\/wp\/v2\/tags?post=58705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}