Insider Risk Management Forensic Evidence
Insider Risk Management Forensic Evidence helps organizations protect, discover, retain, audit, and govern information across Microsoft 365.
Ask AI about this featureWhat this feature does
Insider Risk Management Forensic Evidence helps organizations protect, discover, retain, audit, and govern information across Microsoft 365.
It sits in Microsoft Purview under the Purview workload. Use the licence signal to see where it is included, then open a licence map to understand how it fits with nearby capabilities.
Feature profile
- Product
- Microsoft Purview
- Workload
- Purview
- Category
- Purview
- Status
- active
Related capabilities
eDiscovery Premium
Advanced eDiscovery workflows for custodians, review sets, and analytics.
Data loss prevention
Policies to detect and protect sensitive information.
Audit (premium)
Audit (premium) records and exposes user, administrator, and service activity so teams can investigate changes, access, and compliance events.
Content Search
Content Search helps compliance teams search mailboxes, sites, and Microsoft 365 locations to locate relevant content for investigation or review.
Communication Compliance
Communication Compliance helps detect, review, and remediate risky or inappropriate communications across supported Microsoft 365 channels.
Compliance Manager
Compliance Manager helps assess compliance posture, track improvement actions, and map controls against regulatory or internal requirements.
Open licence coverage table
| Feature | Product | Licence | Status | Source |
|---|---|---|---|---|
| Insider Risk Management Forensic Evidence | Microsoft Purview | M365 E5 | Add-on | Official source |
| Insider Risk Management Forensic Evidence | Microsoft Purview | M365 E7 | Add-on | Official source |
| Insider Risk Management Forensic Evidence | Microsoft Purview | M365 A1 (Legacy) | Add-on | Official source |
| Insider Risk Management Forensic Evidence | Microsoft Purview | Purview Suite | Add-on | Official source |