dlp alerts

DLP alerts in Microsoft Defender have been retired, pushing organizations to migrate their endpoint-sensitive data alerting policies to Microsoft Purview DLP. This shift changes where admins build policies, generate alerts, and investigate sensitive data activity on endpoints. Microsoft's message center confirms that creating alert policies and generating DLP alerts in Defender is no longer supported, with Purview now serving as the primary platform for managing and responding to these alerts within the Defender portal. For WindowsForum users tracking this transition, the tag covers the retirement of Defender DLP alerts, migration steps to Purview, and implications for security workflows.