This session explores how Microsoft Purview Data Security Investigations can help organizations understand data related risks and incidents. It focuses on the path from an initial signal to a clearer view of what happened, which data may be affected, and which teams should be involved. Depending on the audience, the session may cover investigation workflows, sensitive data context, user activity, or handover to legal and compliance teams. Attendees will learn where DSI fits into the broader Purview landscape and how it can support existing processes. The session also highlights where technology helps and where roles, judgement, and clear procedures are still required.