Security incidents gain meaning from context.

In this joint session, we demonstrate how governance and compliance signals (like Sensitivity Labels and DLP events) surface inside Microsoft Defender XDR investigations and enrich analyst workflows.
Through a scenario, we show how classified data changes incident context, improves prioritization decisions, and enhances investigative visibility in the Defender portal.

Coming at this from two different angles, this session aims to bridge configuration decisions with operational security impact.