{
  "$type": "site.standard.document",
  "bskyPostRef": {
    "cid": "bafyreicdgogrh5jppvkiauqfkdkyly2argq6kubfmir4r3egnaj2shthju",
    "uri": "at://did:plc:xxrzfynfiasdpbxteqxi4jgq/app.bsky.feed.post/3mmaly4vbiyv2"
  },
  "description": "Microsoft Purview Data Security Investigations will add notifications for key events and improved query building, reducing manual monitoring and speeding investigations. These AI-enhanced features roll out worldwide from early to late June 2026, require no admin action, and improve compliance vis...",
  "path": "/m365-message-center/message/mc1316229/",
  "publishedAt": "2026-05-20T00:00:06.000Z",
  "site": "https://blog.tophhie.cloud",
  "tags": [
    "560325",
    "Data Security Investigations | Microsoft Purview portal",
    "Learn about Data Security Investigations | Microsoft Purview | Microsoft Learn"
  ],
  "textContent": "**[Introduction]**\n\nWe are introducing **notification capabilities and improved search** in  _Microsoft Purview Data Security Investigations_. These updates reduce the need for manual status checks and simplify how investigators identify potentially impacted data.\n\nThis message is associated with **Microsoft 365 Roadmap ID** 560325.\n\n**[When this will happen]**\n\n**General Availability (Worldwide):** Rolling out in**early June 2026** and expected to complete by**late June 2026**.\n\n**[How this affects your organization]**\n\n_Who is affected_\n\n  * Investigators and analysts using **Microsoft Purview Data Security Investigations**\n\n\n\n _What will happen_\n\n  * Investigators will receive **notifications for key investigation events** , including AI job completion and new data added to scope.\n  * Users will **no longer need to manually monitor** long-running jobs or data ingestion.\n  * **Improved query building** simplifies how investigators construct searches without needing to create complex queries from scratch.\n  * These improvements **reduce time** required to scope new investigations.\n  * The feature is **enabled by default**.\n\n\n\n**[What you can do to prepare]**\n\n  * **No admin action** is required.\n  * Inform your investigation teams that notifications will begin appearing in _Data Security Investigations_.\n  * Update internal investigation or triage workflows to incorporate real-time notifications.\n  * Review current search and query practices to take advantage of the improved experience.\n\n\n\n**Learn more:**\n\n  * Data Security Investigations | Microsoft Purview portal\n  * Learn about Data Security Investigations | Microsoft Purview | Microsoft Learn\n\n\n\n**[Compliance considerations]**\n\n**Question**| **Answer**\n---|---\nDoes the change alter how existing customer data is processed, stored, or accessed?| Yes. AI-powered investigation workflows and improved query capabilities may change how investigators access and analyze scoped data, but do not change the underlying data storage.\nDoes the change introduce or significantly modify AI/ML or agent capabilities that interact with customer data?| Yes. The feature includes AI job processing with added notification triggers when jobs complete, enhancing visibility into AI-driven analysis steps.\nDoes the change alter how admins can monitor, report on, or demonstrate compliance activities?| Yes. Notifications improve visibility into investigation progress, which can support faster response and reporting workflows for compliance teams.",
  "title": "MC1316229: Microsoft Purview Data Security Investigations: Notifications and enhanced search",
  "updatedAt": "2026-05-20T00:00:06.922Z"
}