dlp triage

The dlp triage tag covers discussions about prioritizing Data Loss Prevention alerts, particularly within Microsoft Purview. Content focuses on the DLP Triage Agent, which ranks alerts by content risk, exfiltration risk, and policy risk, providing a rationale for prioritization. This transforms DLP triage from a simple queue into a governed decision point where security teams can verify alert classifications. Topics include risk-based prioritization, reviewable rationale, and practical workflows for administrators and analysts managing DLP alerts in enterprise environments.