This feature introduces the ability to classify DLP alerts directly in the Purview portal. In addition to assigning a status, customers can now categorize alerts as True Positive, False Positive, or Benign Positive. This capability helps security teams better organize, track, and manage alerts, enabling more accurate reporting and efficient incident handling.
Roadmap › 542791
Microsoft Purview: Data Loss Prevention-Alert Classification Property for DLP Alerts on Purview Portal
- General availability
- 2026-02
- Preview
- —
- Added
- 18 Dec 2025
- Last modified
- 16 Mar 2026 23:00 UTC
- First archived
- 25 Aug 2026
- Release rings
- General Availability
- Clouds
- GCC, GCC High, DoD