Microsoft Purview: Data Loss Prevention – Download File Evidence for DLP Investigations (Preview)

We are announcing a new feature in public preview which provides DLP investigators the option to download the full file from SharePoint and/or OneDrive for Business that resulted in a DLP policy match as evidence for DLP Alerts in Microsoft Purview compliance portal and Microsoft 365 Defender portal.

This message is associated with Microsoft 365 Roadmap ID 161943

[When this will happen:]

Preview: This feature is now available in preview.

[How this will affect your organization:]

To download the SharePoint or OneDrive for Business file that resulted in a DLP alert or incident, Navigate to Alerts details tab in the Microsoft Purview compliance portal or Microsoft 365 Defender portal, select the alert, click on the Actions menu, and then click “Download”. 

download the sharepoint or onedrive file

download the sharepoint or onedrive file

If you choose to not use this download feature, there is no impact to your organization. 

[What you need to do to prepare:]

There is nothing you need to do prepare, the download option will be available in the DLP alerts experience in both Microsoft Purview compliance portal and Microsoft 365 Defender portal

Comments

No comments yet. Why don’t you start the discussion?

Leave a Reply

Your email address will not be published. Required fields are marked *