NewMicrosoft Purview
Microsoft Purview: Data Loss Prevention - User Based Aggregation of DLP Alerts
Microsoft Purview Data Loss Prevention will consolidate multiple DLP alerts triggered by the same user into single aggregated alerts, reducing noise and improving investigation efficiency for security teams.
Key dates
- — preview (Feature currently in development)
Microsoft's description
Enable aggregation of DLP alerts based on common entities user even when multiple rules are matched. This feature should consolidate related alert events into a single alert object to: Reduce alert noise, simplify investigation workflows, enhance contextual understanding of violations.