[{"id":567472,"title":"Microsoft Purview: Insider Risk Management - DS Triage Agent for IRM available in Defender","description":"We\u2019re introducing support for Insider Risk Management (IRM) alert agent summaries within Microsoft Defender, enabling investigators to access key triage insights directly in the Defender alert queue.\nWhen the IRM Triage Agent is active, IRM alerts surfaced in Microsoft Defender will now include the agent summary\u2014such as agent categorization, investigation summary, identified risk patterns, and relevant user details\u2014helping analysts quickly assess alert severity without leaving their existing Defender workflows.\nFor deeper analysis, investigators can access the full IRM investigation experience within the Microsoft Purview portal.\nMicrosoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.","moreInfoLink":null,"publicDisclosureAvailabilityDate":"December CY2026","publicPreviewDate":"August CY2026","created":"2026-07-09T23:00:39","publicRoadmapStatus":"Include this month","status":"In development","modified":"2026-07-09T23:00:39","locale":null,"tags":[{"tagName":"Worldwide (Standard Multi-Tenant)"},{"tagName":"Web"},{"tagName":"Microsoft Purview"},{"tagName":"General Availability"},{"tagName":"Preview"}],"tagsContainer":{"products":[{"tagName":"Microsoft Purview"}],"cloudInstances":[{"tagName":"Worldwide (Standard Multi-Tenant)"}],"releasePhase":[{"tagName":"General Availability"},{"tagName":"Preview"}],"platforms":[{"tagName":"Web"}]}}]