Microsoft Purview compliance portal: eDiscovery - Generate keyword query language from natural language prompt in eDiscovery with Copilot for Security

🚨 The Signal: Copilot for Security now integrates with Purview eDiscovery, allowing natural language prompts to generate Keyword Query Language (KQL). This streamlines eDiscovery search setup, potentially accelerating data identification for legal and compliance matters.

The Impact

eDiscovery administrators are affected, with a low security risk related to query accuracy and potential over-disclosure if not reviewed.

• eDiscovery administrators: Risk of inaccurate KQL generation if prompts are ambiguous.
• Legal teams: Faster data identification for compliance and legal holds.
• Security teams: Reduced time to respond to data requests during investigations.

The Action

1. Review Copilot-generated KQL for accuracy before execution.
2. Ensure eDiscovery administrators are trained on effective natural language prompting.
3. Implement a review process for all Copilot-generated eDiscovery searches.

Domain: Purview · Impact: low · Workload: Microsoft Purview