{"id":58705,"date":"2025-05-22T11:22:55","date_gmt":"2025-05-22T09:22:55","guid":{"rendered":"https:\/\/www.schneider.systems\/?p=58705"},"modified":"2025-05-22T18:41:19","modified_gmt":"2025-05-22T16:41:19","slug":"microsoft-purview-data-security-investigations-mitigate-sensitive-data-exposure","status":"publish","type":"post","link":"https:\/\/www.schneider.systems\/lu\/microsoft-purview-data-security-investigations-mitigate-sensitive-data-exposure\/","title":{"rendered":"Microsoft Purview Data Security Investigations: Mitigate sensitive data exposure"},"content":{"rendered":"<p style=\"text-align: justify;\">Effective May 2025, <strong><a href=\"https:\/\/www.schneider.systems\/lu\/microsoft-365-compliance-and-azure-purview-renamed-to-microsoft-purview\/\">Microsoft Purview<\/a> Data Security Investigations<\/strong> (DSI), a solution for <strong>rapidly identifying and mitigating risks from sensitive data exposure<\/strong>, is in <strong>public preview<\/strong>. Administrators will need to activate <a href=\"https:\/\/www.schneider.systems\/lu\/microsoft-purview-pay-as-you-go-meters-protecting-ai-apps-and-agents\/\">Purview PAYG billing<\/a> and provision Security Compute Units to use this feature.<\/p>\n<p style=\"text-align: justify;\"><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-58710\" src=\"https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations.jpg\" alt=\"\" width=\"686\" height=\"386\" srcset=\"https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations.jpg 686w, https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-500x281.jpg 500w, https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-150x84.jpg 150w\" sizes=\"auto, (max-width: 686px) 100vw, 686px\" \/><\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>The Need for Data Security Investigations (DSI)<\/strong><\/h2>\n<p style=\"text-align: justify;\"><strong>Data breaches<\/strong> involving <strong>stolen credentials<\/strong> take an average of <strong>292 days to identify and contain<\/strong>. During this period, organizations struggle to <strong>understand their overall risk<\/strong>, leading to inefficient workflows, labor-intensive data reviews, and increased costs. Additionally, <strong>moving impacted data<\/strong> for analysis or sharing evidence with stakeholders can <strong>expose or leak sensitive information<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>Introducing Purview Data Security Investigations<\/strong><\/h2>\n<div style=\"width: 800px;\" class=\"wp-video\"><video class=\"wp-video-shortcode\" id=\"video-58705-1\" width=\"800\" height=\"450\" poster=\"https:\/\/www.schneider.systems\/media\/2024\/12\/SCHNEIDER-IT-MANAGEMENT-2024-12-11-Update-Website-Microsoft-Purview-Audit.jpg\" preload=\"metadata\" controls=\"controls\"><source type=\"video\/mp4\" src=\"https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-19-Update-Microsoft-Purview-Data-Security-Investigations.mp4?_=1\" \/><a href=\"https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-19-Update-Microsoft-Purview-Data-Security-Investigations.mp4\">https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-19-Update-Microsoft-Purview-Data-Security-Investigations.mp4<\/a><\/video><\/div>\n<p style=\"text-align: justify;\"><strong>Microsoft Purview Data Security Investigations (DSI)<\/strong> is a <strong>unified solution<\/strong> that <strong>enables data security teams to identify incident-related data, investigate it with AI-powered deep content analysis, and mitigate risks within one platform.<\/strong> DSI builds on Microsoft Purview\u2019s existing Data Security portfolio, including information protection, data loss prevention, and insider risk management solutions. <strong>DSI will continue to evolve<\/strong>, with <strong>future features<\/strong> including the <strong>ability to purge overshared risky files and more<\/strong>.<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>Key Benefits of DSI<\/strong><\/h2>\n<ul style=\"text-align: justify;\">\n<li><strong>AI-Powered Analysis<\/strong>: DSI uses generative AI to rapidly analyze data, pinpointing major risks and categorizing impacted data to understand incident severity.<\/li>\n<li><strong>Efficient Risk Mitigation<\/strong>: AI helps identify security risks within impacted data, such as credentials, network risks, or evidence of threat actor discussions.<\/li>\n<li><strong>Proactive Data Hygiene<\/strong>: DSI can be used to examine datasets for sensitive information or security risks, helping prevent data security incidents.<\/li>\n<li><strong>Vector-Based Semantic Search<\/strong>: This feature allows querying impacted data to discover assets related to specific subjects, even if keywords are missing.<\/li>\n<\/ul>\n<h2 style=\"text-align: justify;\"><strong><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-large wp-image-58714\" src=\"https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-800x459.png\" alt=\"\" width=\"800\" height=\"459\" srcset=\"https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-800x459.png 800w, https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-500x287.png 500w, https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-150x86.png 150w, https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations-768x441.png 768w, https:\/\/www.schneider.systems\/media\/2025\/05\/SCHNEIDER-IT-MANAGEMENT-2025-05-22-Update-Website-Microsoft-Purview-Data-Security-Investigations.png 1002w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/strong><\/h2>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>How DSI Works<\/strong><\/h2>\n<ul style=\"text-align: justify;\">\n<li><strong>Incident Detection<\/strong>: When a data breach occurs, DSI enables the security team to search the Microsoft 365 data estate for incident-relevant emails, Teams messages, Copilot prompts, and documents.<\/li>\n<li><strong>AI Analysis<\/strong>: DSI\u2019s AI capabilities categorize impacted data and identify high-risk assets, such as credentials and sensitive documents.<\/li>\n<li><strong>Risk Visualization<\/strong>: DSI visualizes correlations between impacted data, users, and their activities, providing critical context for mitigation.<\/li>\n<li><strong>Secure Collaboration<\/strong>: DSI facilitates secure collaboration between partner teams to address identified risks, such as resetting compromised accounts.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>Integration with Existing Tools<\/strong><\/h2>\n<p style=\"text-align: justify;\"><strong>DSI integrates with Microsoft Defender XDR and Microsoft Purview Insider Risk Management<\/strong>, which allows for <strong>pre-scoped data security investigations<\/strong> to be launched directly from these tools. This integration provides the Security Operations Center (SOC) with <strong>visibility into the impact of security incidents on data<\/strong>, enabling better prioritization based on data sensitivity and severity.<\/p>\n<p>&nbsp;<\/p>\n<h2 style=\"text-align: justify;\"><strong>More information<\/strong><\/h2>\n<p>Learn <strong>how to get started<\/strong>: <a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/data-security-investigations-get-started\">https:\/\/learn.microsoft.com\/en-us\/purview\/data-security-investigations-get-started<\/a>.<\/p>\n<p style=\"text-align: justify;\"><strong>\u00a0<\/strong><\/p>\n<h2 style=\"text-align: justify;\"><strong>Get help from the experts in licensing<\/strong><\/h2>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-large wp-image-56285\" src=\"https:\/\/www.schneider.systems\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-800x533.jpg\" alt=\"\" width=\"800\" height=\"533\" srcset=\"https:\/\/www.schneider.systems\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-800x533.jpg 800w, https:\/\/www.schneider.systems\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-500x333.jpg 500w, https:\/\/www.schneider.systems\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-150x100.jpg 150w, https:\/\/www.schneider.systems\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-768x512.jpg 768w, https:\/\/www.schneider.systems\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-1536x1024.jpg 1536w, https:\/\/www.schneider.systems\/media\/2025\/03\/SCHNEIDER-IT-MANAGEMENT-2025-03-11-Graphics-Office-People-8417-2048x1365.jpg 2048w\" sizes=\"auto, (max-width: 800px) 100vw, 800px\" \/><\/p>\n<p style=\"text-align: justify;\"><strong>Feel free to <\/strong><a href=\"https:\/\/www.schneider.systems\/contact\/\"><strong>reach out to us<\/strong><\/a> to <strong>get expert licensing consultancy regarding Microsoft Purview<\/strong>. We show you the<strong> best options<\/strong> for <strong>your business case<\/strong> in order to help you compare all your options and to make an informed decision.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Effective May 2025, Microsoft Purview Data Security Investigations (DSI), a solution for rapidly identifying and mitigating risks from sensitive data exposure, is in public preview. Administrators will need to activate [&hellip;]<\/p>\n","protected":false},"author":11,"featured_media":33016,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[248,573],"tags":[],"class_list":["post-58705","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-microsoft-azure","category-microsoft-purview"],"_links":{"self":[{"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/posts\/58705","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/comments?post=58705"}],"version-history":[{"count":6,"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/posts\/58705\/revisions"}],"predecessor-version":[{"id":58815,"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/posts\/58705\/revisions\/58815"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/media\/33016"}],"wp:attachment":[{"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/media?parent=58705"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/categories?post=58705"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.schneider.systems\/lu\/wp-json\/wp\/v2\/tags?post=58705"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}