Conduct investigations with Microsoft Purview Audit.
After completing this module, you'll be able to:
- Describe how Microsoft Purview Audit records, retains, and exposes activity across Microsoft 365.
- Configure Audit (Standard) or Audit (Premium) for the users, services, and retention windows your compliance requirements call for.
- Run audit searches from the Microsoft Purview portal and PowerShell to surface evidence of user and admin activity.
- Extend the same search to Copilot and AI app activity across first-party, connected, and non-Microsoft record types.
- Investigate message-level access with Audit (Premium) events like MailItemsAccessed.
- Analyze and report on audit results by parsing exports and joining across record types.
Microsoft Purview sensitivity labels enable you to classify and protect sensitive data throughout your organization, including in the cloud and on devices. This module covers how to classify and protect sensitive information to ensure its security and compliance.
Upon completion of this module, you should be able to:
- Understand the basics of Microsoft Purview sensitivity labels in Microsoft 365.
- Create and publish sensitivity labels to classify and safeguard data.
- Configure encryption settings with sensitivity labels for improved data security.
- Implement auto-labeling for consistent data classification and protection.
- Use the Microsoft Purview data classification dashboard to monitor sensitivity label usage.
Create and manage data loss prevention policies.
In this module you learn to:
- Establish clear intent and boundaries before creating a DLP policy
- Decide when to use a template-based policy or create a custom policy
- Define detection logic that reflects meaningful data risk
- Align policy scope and actions to real business workflows
- Validate and refine policy behavior using simulation mode
- Manage and adapt DLP policies as risk and usage patterns change

Syllabus

Conduct investigations with Microsoft Purview Audit
- Introduction
- Understand how Microsoft Purview Audit works
- Configure and manage Microsoft Purview Audit
- Configure audit retention with Audit (Premium)
- Run audit searches with Audit (Standard)
- Investigate activities with Audit (Premium)
- Search for Copilot and AI app activities
- Analyze and report on audit results
- Module assessment
- Summary
Create and configure sensitivity labels with Microsoft Purview
- Introduction
- Sensitivity label overview
- Create and configure sensitivity labels and label policies
- Configure encryption with sensitivity labels
- Implement auto-labeling policies
- Track and evaluate sensitivity label usage in Microsoft Purview
- Module assessment
- Summary
Create and manage data loss prevention policies
- Introduction
- Understand how DLP policy decisions fit together
- Choose a template or create a custom policy
- Define what the policy detects
- Align policy scope to risk
- Define how the policy responds
- Validate policy behavior using simulation mode
- Manage DLP policies
- Adjust enforcement dynamically based on risk
- Guided walkthrough: Create a DLP policy
- Module assessment
- Summary