Public mode

No access to your tenant or devices. Every item links to its source. What this means

Some sources, documents or advisories need attention: 274/275 feeds/APIs · 469/469 docs · 6/9 advisories · checked 20:03 UTC Customize Public modeDiscuss ChangeIntel on Discord

Microsoft Purview: Data Security Triage agent in DLP is generally available worldwide

Microsoft 365 Message Center Archive by Merill Fernando

Summary

The Data Security Triage Agent creates an agent-managed alert queue that identifies and prioritizes the DLP and IRM alerts that pose the greatest risk to your organization. It delivers a summary and clear explanation for why each alert was prioritized, helping analysts focus on what matters most. For this GA release, we’re introducing expanded coverage (which also includes Endpoint DLP alerts as well as alerts that leverage Custom SITs (Sensitive Information Types)) and support for Entra Agent ID.

Status
Launched
General availability target
Dec 2025
Preview target
Not published
Clouds
Worldwide (Standard Multi-Tenant)
Release phases
General Availability
Platforms
Web
Source created
11 Dec 2025
Source modified
14 May 2026 · 6mo ago
ChangeIntel

An IT change radar: releases, security, known issues, retirements, documentation changes, and service status from public sources. Every item links to supporting evidence; dates and statuses can change after they are read.

Sources read 11 Nov 20:03 UTC · 274 of 275 readable · 273 fully read · documentation 469/469 current