{"id":16741,"date":"2026-06-09T08:01:03","date_gmt":"2026-06-08T23:01:03","guid":{"rendered":"https:\/\/m365jp.net\/?p=16741"},"modified":"2026-06-09T08:01:26","modified_gmt":"2026-06-08T23:01:26","slug":"mc1384427-microsoft-purview-data-security-investigations-investigation-templates-for-common-data-security-scenarios","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2026-06-09-mc1384427-microsoft-purview-data-security-investigations-investigation-templates-for-common-data-security-scenarios","title":{"rendered":"MC1384427 | Microsoft Purview | Data Security Investigations: Investigation templates for common data security scenarios"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC1384427 | Microsoft Purview | Data Security Investigations: Investigation templates for common data security scenarios<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>stayInformed<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>06\/08\/2026 22:21:56<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>06\/08\/2026 22:21:48<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>07\/05\/2026 07:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p><b>[What and Why]<\/b><\/p>\n<p>We\u2019re adding <b>search templates<\/b> to <b>Microsoft Purview Data Security Investigations<\/b> to provide pre-configured search queries for common data security scenarios such as data exfiltration, compromised mailboxes, personal data exposure, and risky   AI interactions. These templates help investigators quickly and consistently scope investigations in just a few clicks instead of manually building queries, reducing setup time and lowering the barrier for less-experienced analysts. Users can select a template,   provide minimal inputs (such as a user or site), and begin their investigation.<\/p>\n<p>This message is associated with <b>Microsoft 365 Roadmap ID <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=560326\" target=\"_blank\">  560326<\/a><\/b>.<\/p>\n<p><b>[Rollout Schedule]<\/b><\/p>\n<p><b>General Availability (Worldwide): <\/b>Available now<\/p>\n<\/p>\n<p><b>[Impact on Your Organization]<\/b><\/p>\n<p><i>Who is affected<\/i><\/p>\n<p style=\"margin-left: 25px\">Security analysts and investigators using Microsoft Purview Data Security Investigations<\/p>\n<p><i>Platforms\/Services<\/i><\/p>\n<ul>\n<li>Microsoft Purview (web)<\/li>\n<li>Data Security Investigations solution<\/li>\n<\/ul>\n<p><i>What will happen<\/i><\/p>\n<ul>\n<li>Investigators can start a new investigation using prebuilt templates instead of creating search queries from scratch.<\/li>\n<li>Templates cover common data security scenarios and require only minimal inputs (for example, user, mailbox, or SharePoint site) to start an investigation.<\/li>\n<li>Investigations are automatically scoped and ready to run once inputs are provided.<\/li>\n<li>This reduces manual setup time and helps standardize investigation workflows.<\/li>\n<li>Existing investigations and custom queries are not affected.<\/li>\n<li>The feature will be<b> available by default<\/b> <b>where Data Security Investigations is enabled<\/b>.<\/li>\n<\/ul>\n<p><i>Screenshot &#8211; Creating an investigation from a template in Data Security Investigations:&nbsp;<\/i><\/p>\n<p><img decoding=\"async\" style=\"width: 400px\" alt=\"user settings\" src=\"https:\/\/cxcs.microsoft.net\/static\/public\/messagecenter\/neutral\/106ab478-cfe2-417c-8ead-06c03e88eee4\/e8cb56ba069b8dca705828a14f6e02de0508a2b0.png\"><\/p>\n<\/p>\n<p>Typical workflow:<\/p>\n<ol>\n<li>Create a new investigation in<i> Data Security Investigations<\/i>.<\/li>\n<li>Select a template that matches your scenario.<\/li>\n<li>Provide the required inputs.<\/li>\n<li>Run the query to open a scoped investigation.<\/li>\n<\/ol>\n<p><b>[Action Required\/Recommendations]<\/b><\/p>\n<p>No admin action is required.<\/p>\n<p>Recommended actions:<\/p>\n<ul>\n<li>Inform your security and investigation teams about this capability<\/li>\n<li>Encourage teams to use templates to standardize investigation workflows<\/li>\n<li>Review internal investigation procedures and update documentation if needed<\/li>\n<\/ul>\n<p><b>Learn more:<\/b><\/p>\n<ul>\n<li><a href=\"https:\/\/sip.purview.microsoft.com\/dsi\/overviewpage?tid=72f988bf-86f1-41af-91ab-2d7cd011db47\" target=\"_blank\">Data Security Investigations | Microsoft Purview<\/a><\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/purview\/data-security-investigations\" target=\"_blank\">Learn about Data Security Investigations | Microsoft Purview | Microsoft Learn<\/a><\/li>\n<\/ul>\n<p><b>[Compliance considerations]<\/b><\/p>\n<p>No compliance considerations identified. Review as appropriate for your organization.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p><b>\u3010\u4f55\u3068\u306a\u305c\u3011<\/b><\/p>\n<p><b>Microsoft Purview Data Security Investigations<\/b>\u306b\u306f<b>\u691c\u7d22\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8<\/b>\u3092\u8ffd\u52a0\u3057\u3001\u30c7\u30fc\u30bf\u6d41\u51fa\u3001\u4fb5\u5bb3\u3055\u308c\u305f\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9\u3001\u500b\u4eba\u30c7\u30fc\u30bf\u306e\u9732\u51fa\u3001\u30ea\u30b9\u30af\u306e\u9ad8\u3044AI\u3068\u306e\u76f8\u4e92\u4f5c\u7528\u306a\u3069\u3001\u4e00\u822c\u7684\u306a\u30c7\u30fc\u30bf\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30b7\u30ca\u30ea\u30aa\u306b\u5bfe\u3057\u3066\u4e8b\u524d\u8a2d\u5b9a\u3055\u308c\u305f\u691c\u7d22\u30af\u30a8\u30ea\u3092\u63d0\u4f9b\u3057\u307e\u3059\u3002\u3053\u308c\u3089\u306e\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u306f\u3001\u8abf\u67fb\u8005\u304c\u624b\u52d5\u3067\u30af\u30a8\u30ea\u3092\u4f5c\u6210\u3059\u308b\u4ee3\u308f\u308a\u306b\u3001\u6570\u30af\u30ea\u30c3\u30af\u3067\u8fc5\u901f\u304b\u3064\u4e00\u8cab\u3057\u3066\u8abf\u67fb\u7bc4\u56f2\u3092\u7279\u5b9a\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u3001\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u6642\u9593\u3092\u77ed\u7e2e\u3057\u3001\u7d4c\u9a13\u306e\u6d45\u3044\u30a2\u30ca\u30ea\u30b9\u30c8\u306e\u30cf\u30fc\u30c9\u30eb\u3092\u4e0b\u3052\u307e\u3059\u3002\u30e6\u30fc\u30b6\u30fc\u306f\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u3092\u9078\u629e\u3057\u3001\u6700\u5c0f\u9650\u306e\u5165\u529b(\u30e6\u30fc\u30b6\u30fc\u3084\u30b5\u30a4\u30c8\u306a\u3069)\u3060\u3051\u3067\u8abf\u67fb\u3092\u59cb\u3081\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u306f <b>Microsoft 365\u30ed\u30fc\u30c9\u30de\u30c3\u30d7ID <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=560326\" target=\"_blank\">  560326<\/a><\/b>\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<p><b>[\u5c55\u958b\u30b9\u30b1\u30b8\u30e5\u30fc\u30eb]<\/b><\/p>\n<p><b>\u4e00\u822c\u516c\u958b(\u4e16\u754c): <\/b>\u73fe\u5728\u767a\u58f2\u4e2d<\/p>\n<\/p>\n<p><b>[\u7d44\u7e54\u3078\u306e\u5f71\u97ff]<\/b><\/p>\n<p><i>\u5f71\u97ff\u3092\u53d7\u3051\u308b\u4eba\u7269<\/i><\/p>\n<p style=\"margin-left: 25px\">Microsoft Purview Data Security Investigations\u3092\u5229\u7528\u3059\u308b\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30a2\u30ca\u30ea\u30b9\u30c8\u3084\u8abf\u67fb\u54e1<\/p>\n<p><i>\u30d7\u30e9\u30c3\u30c8\u30d5\u30a9\u30fc\u30e0\/\u30b5\u30fc\u30d3\u30b9<\/i><\/p>\n<ul>\n<li>Microsoft Purview(\u30a6\u30a7\u30d6)<\/li>\n<li>\u30c7\u30fc\u30bf\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8abf\u67fb\u30bd\u30ea\u30e5\u30fc\u30b7\u30e7\u30f3<\/li>\n<\/ul>\n<p><i>\u4f55\u304c\u8d77\u3053\u308b\u306e\u304b<\/i><\/p>\n<ul>\n<li>\u8abf\u67fb\u54e1\u306f\u3001\u691c\u7d22\u30af\u30a8\u30ea\u3092\u4e00\u304b\u3089\u4f5c\u6210\u3059\u308b\u4ee3\u308f\u308a\u306b\u3001\u3042\u3089\u304b\u3058\u3081\u4f5c\u6210\u3055\u308c\u305f\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u3092\u4f7f\u3063\u3066\u65b0\u3057\u3044\u635c\u67fb\u3092\u958b\u59cb\u3067\u304d\u307e\u3059\u3002<\/li>\n<li>\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u306f\u4e00\u822c\u7684\u306a\u30c7\u30fc\u30bf\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30b7\u30ca\u30ea\u30aa\u3092\u30ab\u30d0\u30fc\u3057\u3001\u8abf\u67fb\u3092\u958b\u59cb\u3059\u308b\u305f\u3081\u306b\u6700\u5c0f\u9650\u306e\u5165\u529b(\u4f8b\u3048\u3070\u30e6\u30fc\u30b6\u30fc\u3001\u30e1\u30fc\u30eb\u30dc\u30c3\u30af\u30b9\u3001SharePoint\u30b5\u30a4\u30c8)\u3067\u6e08\u307f\u307e\u3059\u3002<\/li>\n<li>\u8abf\u67fb\u306f\u5165\u529b\u304c\u63d0\u4f9b\u3055\u308c\u308b\u3068\u81ea\u52d5\u7684\u306b\u7bc4\u56f2\u304c\u8a2d\u5b9a\u3055\u308c\u3001\u5b9f\u884c\u306e\u6e96\u5099\u304c\u6574\u3044\u307e\u3059\u3002<\/li>\n<li>\u3053\u308c\u306b\u3088\u308a\u624b\u52d5\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u306e\u6642\u9593\u304c\u77ed\u7e2e\u3055\u308c\u3001\u8abf\u67fb\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u306e\u6a19\u6e96\u5316\u306b\u3082\u3064\u306a\u304c\u308a\u307e\u3059\u3002<\/li>\n<li>\u65e2\u5b58\u306e\u8abf\u67fb\u3084\u30ab\u30b9\u30bf\u30e0\u30af\u30a8\u30ea\u306b\u306f\u5f71\u97ff\u304c\u3042\u308a\u307e\u305b\u3093\u3002<\/li>\n<li>\u3053\u306e\u6a5f\u80fd\u306f\u3001<b>\u30c7\u30fc\u30bf\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8abf\u67fb\u304c\u6709\u52b9\u3067\u3042\u308c\u3070<\/b><b>\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u5229\u7528<\/b>\u53ef\u80fd\u3067\u3059\u3002<\/li>\n<\/ul>\n<p><i>\u30b9\u30af\u30ea\u30fc\u30f3\u30b7\u30e7\u30c3\u30c8 &#8211; Data Security Investigations\u306e\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u304b\u3089\u8abf\u67fb\u3092\u4f5c\u6210\u3059\u308b\u65b9\u6cd5:&nbsp;<\/i><\/p>\n<p><img decoding=\"async\" style=\"width: 400px\" alt=\"user settings\" src=\"https:\/\/cxcs.microsoft.net\/static\/public\/messagecenter\/neutral\/106ab478-cfe2-417c-8ead-06c03e88eee4\/e8cb56ba069b8dca705828a14f6e02de0508a2b0.png\"><\/p>\n<\/p>\n<p>\u5178\u578b\u7684\u306a\u30ef\u30fc\u30af\u30d5\u30ed\u30fc:<\/p>\n<ol>\n<li><i>\u30c7\u30fc\u30bf\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8abf\u67fb<\/i>\u3067\u65b0\u3057\u3044\u8abf\u67fb\u3092\u4f5c\u6210\u3057\u307e\u3057\u3087\u3046\u3002<\/li>\n<li>\u81ea\u5206\u306e\u72b6\u6cc1\u306b\u5408\u3063\u305f\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u3092\u9078\u3073\u307e\u3057\u3087\u3046\u3002<\/li>\n<li>\u5fc5\u8981\u306a\u5165\u529b\u3092\u63d0\u4f9b\u3057\u307e\u3057\u3087\u3046\u3002<\/li>\n<li>\u30af\u30a8\u30ea\u3092\u5b9f\u884c\u3057\u3066\u7bc4\u56f2\u8abf\u67fb\u3092\u958b\u59cb\u3057\u307e\u3059\u3002<\/li>\n<\/ol>\n<p><b>[\u884c\u52d5\u304c\u5fc5\u8981\/\u63d0\u8a00]<\/b><\/p>\n<p>\u7ba1\u7406\u8005\u306e\u5bfe\u5fdc\u306f\u4e0d\u8981\u3067\u3059\u3002<\/p>\n<p>\u63a8\u5968\u3055\u308c\u308b\u884c\u52d5:<\/p>\n<ul>\n<li>\u3053\u306e\u6a5f\u80fd\u306b\u3064\u3044\u3066\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u304a\u3088\u3073\u8abf\u67fb\u30c1\u30fc\u30e0\u306b\u77e5\u3089\u305b\u3066\u304f\u3060\u3055\u3044<\/li>\n<li>\u8abf\u67fb\u30ef\u30fc\u30af\u30d5\u30ed\u30fc\u306e\u6a19\u6e96\u5316\u306e\u305f\u3081\u306b\u30c6\u30f3\u30d7\u30ec\u30fc\u30c8\u306e\u4f7f\u7528\u3092\u30c1\u30fc\u30e0\u306b\u4fc3\u3057\u307e\u3057\u3087\u3046<\/li>\n<li>\u5185\u90e8\u8abf\u67fb\u624b\u9806\u3092\u898b\u76f4\u3057\u3001\u5fc5\u8981\u306b\u5fdc\u3058\u3066\u6587\u66f8\u3092\u66f4\u65b0\u3057\u3066\u304f\u3060\u3055\u3044<\/li>\n<\/ul>\n<p><b>\u8a73\u3057\u304f\u306f\u3053\u3061\u3089:<\/b><\/p>\n<ul>\n<li><a href=\"https:\/\/sip.purview.microsoft.com\/dsi\/overviewpage?tid=72f988bf-86f1-41af-91ab-2d7cd011db47\" target=\"_blank\">\u30c7\u30fc\u30bf\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8abf\u67fb |Microsoft Purview<\/a><\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/purview\/data-security-investigations\" target=\"_blank\">\u30c7\u30fc\u30bf\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8abf\u67fb\u306b\u3064\u3044\u3066\u5b66\u3076 |Microsoft Purview |Microsoft Learn<\/a><\/li>\n<\/ul>\n<p><b>[\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u306e\u8003\u616e\u4e8b\u9805]<\/b><\/p>\n<p>\u30b3\u30f3\u30d7\u30e9\u30a4\u30a2\u30f3\u30b9\u4e0a\u306e\u8003\u616e\u4e8b\u9805\u306f\u7279\u5b9a\u3055\u308c\u3066\u3044\u307e\u305b\u3093\u3002\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u5fdc\u3058\u3066\u30ec\u30d3\u30e5\u30fc\u3092\u884c\u3063\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC1384427 | Microsoft Purview | Data Security Investigations: Investigation templates for common data security [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-16741","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/16741","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=16741"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/16741\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=16741"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=16741"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=16741"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}