Endpoint Data Loss Prevention: Always-on diagnostics for Windows Endpoints (Phase 2) [MC1181277]

Endpoint Data Loss Prevention: Always-on diagnostics for Windows Endpoints (Phase 2) [MC1181277]

Message ID: MC1181277 [Introduction] To support faster, more seamless investigations, Microsoft is introducing Always-on diagnostics for Windows endpoints (Phase 2). This enhancement allows admins to retrieve diagnostic traces directly from Windows devices and selectively upload them to Microsoft via the…
Microsoft 365 Admin Center: Admin Audit logs in Purview [MC1169075]

Microsoft 365 Admin Center: Admin Audit logs in Purview [MC1169075]

Message ID: MC1169075 (Updated) Updated October 28, 2025: We have updated the content. Thank you for your patience.[Introduction] Admin activity related to agent management will now be logged in Microsoft Purview Unified Audit Logs. This enhancement improves visibility and traceability…
Microsoft Purview compliance portal: Insider Risk Management – Introduction of pay-as-you-go feature usage report [MC1173203]

Microsoft Purview compliance portal: Insider Risk Management – Introduction of pay-as-you-go feature usage report [MC1173203]

Message ID: MC1173203 [Introduction] We’re introducing a new pay-as-you-go feature usage report in Microsoft Purview Insider Risk Management. This report provides detailed insights into billed processing unit usage across data source categories and activity indicators. It’s designed to help Insider…
Microsoft 365 Admin Center: Admin Audit logs in Purview [MC1169075]

Microsoft 365 Admin Center: Admin Audit logs in Purview [MC1169075]

Message ID: MC1169075 [Introduction] Admin activity related to agent management will now be logged in Microsoft Purview Unified Audit Logs. This enhancement improves visibility and traceability for security teams managing Copilot agents across Microsoft 365 services. This message is associated…
(Updated) Microsoft Purview: IRM RBAC Change (related to Data Security Investigations) Preview [MC1041756]

(Updated) Microsoft Purview: IRM RBAC Change (related to Data Security Investigations) Preview [MC1041756]

Message ID: MC1041756 (Updated) Updated October 7, 2025: We have updated the timeline. Thank you for your patience.     Microsoft Purview Insider Risk Management (IRM) will be adding a new role--Data Security Investigation Contributor--to the Insider Risk Management Investigators role…
Public preview: New content explorer experience for cases in Insider Risk Management [MC1162957]

Public preview: New content explorer experience for cases in Insider Risk Management [MC1162957]

Message ID: MC1162957 [Introduction] We’re introducing a new content explorer experience for cases in Insider Risk Management, now available in public preview. This update enhances the classic content explorer with advanced filtering, grouping options, document preview, column customization, and time…