New Agents in Microsoft Purview
Security teams often face alert overload and hidden data risks. This video shows how Microsoft Purview agents, powered by Security Copilot, help you focus on what matters most. Watch how the Data Security Triage Agent prioritizes incidents and how the Data Security Posture Agent surfaces risks through natural language queries.
What are the new agents in Microsoft Purview?
The new agents in Microsoft Purview are AI-powered helpers designed to streamline your daily data security work so you can focus on real risks instead of sifting through noise.
There are two key agents:
1. **Data Security Triage Agent**
- Helps you manage Insider Risk and Data Loss Prevention (DLP) alerts.
- Cuts through alert overload by highlighting which incidents actually need your attention.
- Reduces false positives so you spend less time chasing non-issues.
- Provides clear, contextual reasoning behind each alert, so you understand *why* something is risky.
- Can automate user outreach, helping you follow up with employees directly from the workflow.
2. **Data Security Posture Agent**
- Helps you uncover risks that are hard to see with traditional rules alone.
- Uses natural-language queries, so you can ask questions about your data security posture in plain English.
- When it finds issues, you can apply sensitivity labels and trigger security policies right from the insight.
Both agents are powered by Security Copilot and are built to reimagine how you manage data security: less manual triage, more targeted action, and a clearer view of where your real risks are.
How does the Data Security Triage Agent reduce alert overload?
The Data Security Triage Agent is designed to make your alert handling more manageable and more accurate.
Here’s how it helps:
- **Prioritizes real risks**: Instead of presenting every alert at the same level, the agent surfaces the Insider Risk and DLP incidents that are most likely to matter, so your team can focus on what’s truly important.
- **Reduces false positives**: By using context and AI-driven analysis, it filters out many of the alerts that don’t represent real risk, cutting down on time spent investigating non-issues.
- **Explains the “why” behind alerts**: Each alert comes with clear, contextual reasoning, so analysts can quickly understand what triggered it and whether it needs action.
- **Automates user outreach**: When appropriate, the agent can help you initiate communication with users involved in an incident, keeping you in control while reducing manual follow-up.
In practice, this means your security team spends less time triaging noise and more time resolving the incidents that actually impact your organization’s data security.
What does the Data Security Posture Agent do beyond traditional DLP?
The Data Security Posture Agent extends your existing DLP and data security capabilities by helping you uncover and act on risks that are harder to see with static rules alone.
Key capabilities include:
- **Natural-language risk discovery**: You can ask questions about your data security posture in everyday language (for example, about where sensitive data is concentrated or how it’s being accessed), instead of building complex queries.
- **Context-aware insights**: The agent looks at context around data usage and access patterns to highlight potential risks that might not be obvious from simple policy matches.
- **Direct action from insights**: When the agent identifies an issue, you can immediately apply sensitivity labels or trigger security policies from the same view, reducing the gap between detection and response.
- **Proactive prevention**: By continuously surfacing posture issues, it helps you address weaknesses before they turn into data loss incidents.
Powered by Security Copilot, the Data Security Posture Agent helps you rethink how you monitor and improve your overall data security posture—moving from reactive incident handling to more proactive risk management.
New Agents in Microsoft Purview
published by Granite Networks
Granite Networks was founded in 1998 on the simple premise of providing businesses with IT services and support as solid and dependable as our namesake. We built our business from one referral to the next, counting on our results to inspire our clients to recommend us to others. Since that time, we have consistently earned the trust of our clients by focusing on our clients’ businesses, our clients’ goals, and our clients’ success. Today, Granite Networks has the honor of serving clients including professional service firms, manufacturers, commercial service firms, financial institutions, schools, non-profit agencies, and more.
Imagine your business operating in a world where technology is no longer a hurdle to overcome, but a powerful ally in your journey to success. That’s the world we create for our clients with GranITe Works®.
Designed with precision and a deep understanding of diverse organizational needs, GranITe Works® is not just a service, but a commitment to deliver world-class technology administration. It’s a promise to transform the way you perceive IT costs - predictable, transparent, and scalable.
In essence, we don’t just make IT work - we make IT work for you.® Welcome to a world where technology is your partner in success. Welcome to GranITe Works®.
Sign in with LinkedIn