New Agents in Microsoft Purview

Use the Data Security Triage Agent to cut through alert overload, eliminate false positives, and immediately understand which Insider Risk or DLP incidents need your attention. Stay in control with automated user outreach and clear, contextual reasoning behind every alert. 

Use the Data Security Posture Agent to uncover risks that hide behind context with natural-language queries. When issues are found, apply labels and trigger security policies right from the insight, helping you proactively prevent data loss. Powered by Security Copilot, these agents give you a faster, smarter, more efficient way to manage data security.

Cut through alert overload with AI-driven triage. 

Elevate only alerts that matter to save time and sharpen focus. Get started with the Data Security Triage Agent in Microsoft Purview.

Pinpoint where sensitive data needs immediate protection. 

Ask natural-language questions to reveal data risks across Outlook, Teams, Copilot, SharePoint, OneDrive, and AI interactions. Check it out.

QUICK LINKS: 

00:00 — Agents in Microsoft Purview 

00:44 — Data Security Triage Agent 

01:48 — Data Security Posture Agent

Unfamiliar with Microsoft Mechanics? 

As Microsoft’s official video series for IT, you can watch and share valuable content and demos of current and upcoming tech from the people who build it at Microsoft. 

• Subscribe to our YouTube: https://www.youtube.com/c/MicrosoftMechanicsSeries 
• Talk with other IT Pros, join us on the Microsoft Tech Community: https://techcommunity.microsoft.com/t5/microsoft-mechanics-blog/bg-p/MicrosoftMechanicsBlog
• Watch or listen from anywhere, subscribe to our podcast: https://microsoftmechanics.libsyn.com/podcast

Keep getting this insider knowledge, join us on social: 

• Follow us on Twitter: https://twitter.com/MSFTMechanics 
• Share knowledge on LinkedIn: https://www.linkedin.com/company/microsoft-mechanics/
• Enjoy us on Instagram: https://www.instagram.com/msftmechanics/
• Loosen up with us on TikTok: https://www.tiktok.com/@msftmechanics

Video Transcript:

Whether you’re an admin focused on strengthening your organization’s data security posture, or an analyst concerned with mitigating immediate data risks, the new AI-powered Data Security Agents in Microsoft Purview simplify the process. They work alongside you to ease the burden of identifying and addressing the increased risks from the growing volumes of human and automated agentic activity that use your organization’s data. Guided by your feedback, they don’t just react, they help you proactively improve your security posture while enabling more rapid identification and mitigation as data risks unfold.

As you start your day, the Data Security Triage Agent is your AI-powered assistant for managing insider risk management and data loss prevention alerts. It sifts through your alert queue, using advanced reasoning to establish context, assessing sensitive information flagged by policies, and eliminating false positives, taking care of the busy work for you. It surfaces the highest-priority alerts that truly need your attention, and provides clear reasoning behind its decisions, including details about the data owner, or last user involved in the incident. 

Then it goes a step further, autonomously contacting associated users in Microsoft Teams with details on the sensitive information found, and recommended actions. It tracks progress intelligently, nudging users as often as you define, helping you to remediate imminent risks faster. And as an analyst, you maintain full control with visibility into agent impact, and the actions taken over time. 

Next, the Data Security Posture Agent lets you explore, in natural language, how well your high-value data is protected across sources like Outlook Mailboxes, including Teams Chats, as well as SharePoint and OneDrive. When you submit a query, AI-powered intent analysis goes beyond keywords and predefined data types to uncover risk factors rooted in context, revealing where data is truly at risk, and needs protection. Built-in policy control then lets you apply human logic to label files and trigger corresponding security policies to proactively prevent data loss. These agents in Microsoft Purview are powered by the Security Copilot platform, and are ready for you to try today.