New Agents in Microsoft Purview
Security teams often face alert overload and hidden data risks. This video shows how Microsoft Purview agents, powered by Security Copilot, help you focus on what matters most. Watch how the Data Security Triage Agent prioritizes incidents and how the Data Security Posture Agent surfaces risks through natural language queries.
What are the new agents in Microsoft Purview?
The new agents in Microsoft Purview are AI-powered helpers designed to streamline your daily data security work so you can focus on real risks instead of sifting through noise.
There are two key agents:
1. **Data Security Triage Agent**
- Helps you manage Insider Risk and Data Loss Prevention (DLP) alerts.
- Cuts through alert overload by highlighting which incidents actually need your attention.
- Reduces false positives so you spend less time chasing non-issues.
- Provides clear, contextual reasoning behind each alert, so you understand *why* something is risky.
- Can automate user outreach, helping you follow up with employees directly from the workflow.
2. **Data Security Posture Agent**
- Helps you uncover risks that are hard to see with traditional rules alone.
- Uses natural-language queries, so you can ask questions about your data security posture in plain English.
- When it finds issues, you can apply sensitivity labels and trigger security policies right from the insight.
Both agents are powered by Security Copilot and are built to reimagine how you manage data security: less manual triage, more targeted action, and a clearer view of where your real risks are.
How does the Data Security Triage Agent reduce alert overload?
The Data Security Triage Agent is designed to make your alert handling more manageable and more accurate.
Here’s how it helps:
- **Prioritizes real risks**: Instead of presenting every alert at the same level, the agent surfaces the Insider Risk and DLP incidents that are most likely to matter, so your team can focus on what’s truly important.
- **Reduces false positives**: By using context and AI-driven analysis, it filters out many of the alerts that don’t represent real risk, cutting down on time spent investigating non-issues.
- **Explains the “why” behind alerts**: Each alert comes with clear, contextual reasoning, so analysts can quickly understand what triggered it and whether it needs action.
- **Automates user outreach**: When appropriate, the agent can help you initiate communication with users involved in an incident, keeping you in control while reducing manual follow-up.
In practice, this means your security team spends less time triaging noise and more time resolving the incidents that actually impact your organization’s data security.
What does the Data Security Posture Agent do beyond traditional DLP?
The Data Security Posture Agent extends your existing DLP and data security capabilities by helping you uncover and act on risks that are harder to see with static rules alone.
Key capabilities include:
- **Natural-language risk discovery**: You can ask questions about your data security posture in everyday language (for example, about where sensitive data is concentrated or how it’s being accessed), instead of building complex queries.
- **Context-aware insights**: The agent looks at context around data usage and access patterns to highlight potential risks that might not be obvious from simple policy matches.
- **Direct action from insights**: When the agent identifies an issue, you can immediately apply sensitivity labels or trigger security policies from the same view, reducing the gap between detection and response.
- **Proactive prevention**: By continuously surfacing posture issues, it helps you address weaknesses before they turn into data loss incidents.
Powered by Security Copilot, the Data Security Posture Agent helps you rethink how you monitor and improve your overall data security posture—moving from reactive incident handling to more proactive risk management.
New Agents in Microsoft Purview
published by Fidelitech Solutions Inc.
Experience Secure and Reliable SMART IT Solutions that works for you
At Fidelitech Solutions, we have been proudly serving as a Compliance and Managed IT Support and Advanced Security Services Provider since 2001. As a service-disabled veteran-owned and operated company based in Salt Lake City, Utah, we are committed to delivering top-notch solutions to our valued customers.
Our dedicated team includes courteous professionals, some with a background in the United States Marine Corps. With ongoing training in a wide range of standards and technologies, we have the expertise to provide confident and fast services. Rest assured, our solutions are reliable and secure, giving you the total peace of mind you deserve.
Choose Fidelitech Solutions for all your IT needs and sleep soundly, knowing you are secure with us.
Here’s why so many businesses depend on Fidelitech Solutions:
- Solid Performing: A partner that is dedicated, driven, and passionate about the success of your business! We are focused on providing Lightning-Fast response times resolving complex issues promptly. We have been in business over two-decades servicing smiling small businesses owners.
- Managed Services that reduce network, server, and desktop downtime through automation, SMART and secure tools, and knowledgeable professionals. We have a Proactive service philosophy enabling you and our technicians to live a higher quality lifestyle while not having to react to typical technology related fires. Be SMART not Reactive.
- Affordable Solutions: We enable you to reduce capital waste through SMART purchasing decisions, resourceful advisors, and technology solutions catered to your organization’s actual needs and requirements. 100% Satisfaction – Guaranteed. Our team will go the extra mile to ensure you are always completely satisfied with our service and support.
- Reliable and Cyber Security focused technology partner enabling your organization to strengthen security and protect your assets while maintaining compliance and standard’s requirements. Our team is trained and experienced in helping organizations plan, implement, and maintain a HIPAA, NIST, CMMC, PCI, and SOC compliancy.
- Technology Advisors with extensive experience providing organizations like yours with unique perspectives, advice, and solutions to their Information Technology, Cybersecurity, and Compliance needs. No Geek-Speak PLAIN ENGLISH answers to your questions. Our technicians will also not talk down to you or make you feel stupid because you don’t understand how all this “technology” works. That’s our job! Our custom service packages deliver what you need and want without overstepping the boundaries of your budget. From cloud services to data backup, Fidelitech Solutions is here to team up with you and your company for expert support.
Our custom service packages deliver what you need and want without overstepping the boundaries of your budget. From cloud services to data backup, Fidelitech Solutions is here to team up with you and your company for expert support.
Sign in with LinkedIn