Microsoft Purview: New Purview Data Security Investigations (DSI) solution

Updated April 11, 2025: Removing this post as it is a duplicate of MC1047912. We will continue rolling out.

Microsoft Purview Data Security Investigations (DSI) is a new AI-powered solution that enables data security teams to identify incident-related data, conduct deep content analysis, and mitigate risk within one unified solution.

When this will happen:

Public Preview: We will communicate via Message center when we are ready to proceed.

General Availability (Worldwide): We will communicate via Message center when we are ready to proceed.

How this will affect your organization:

DSI enables data security admins to efficiently identify incident-relevant content by searching their Microsoft 365 data estate to locate emails, Microsoft Teams messages, Microsoft Copilot prompts and responses, and documents.

After an admin scopes an investigation, DSI’s generative AI capabilities allow admins to gain deeper insights into the impacted data, revealing critical security risks and sensitive information. Investigative capabilities include the ability to categorize evidence, perform vector searches, and examine impacted data for security and sensitive data risks.

DSI visualizes correlations between investigation data, users, and their activities. To mitigate identified risks, DSI facilitates secure collaboration between partner teams. Post-investigation learnings can be used to refine existing policies to strengthen your organization's security practices.

Get started with DSI on the overview page with information on enrollment and enabling RBAC (role-based access control):

Categorize your data to identify highest risk items and plan mitigation actions accordingly:

Understand investigation progress and insights with the Investigation summary view:

What you need to do to prepare:

Learn more: Accelerate data security investigations with AI-powered deep content analysis | Microsoft Community Hub

When the Public Preview begins, we will update this post with new documentation.

Get started on the Purview DSI overview page (coming soon) to complete setup and get oriented in a few simple steps:

1. Enable access in Microsoft Purview > Permission for DSI admins, DSI investigators and DSI reviewers in your organization.
2. Complete the DSI first-run experience including:
   1. Enrolling your Purview subscription for non-AI storage and processing meter
   2. Enrolling for AI consumption using security compute units
3. Get started with your first investigation.