Investigation settings in Data Security Investigations (preview)

Investigation details let you view and update investigation information. You can take action on specific investigations.

Investigation details

The investigation settings display the following information for the selected investigation:

• ID: Shows the investigation ID number. You can review this ID but can't change it once the investigation is created.
• Investigation name: Shows the investigation name. This field is required. To change the investigation name, enter the new investigation name and select Actions > Save.
• Investigation description: Shows an optional description to help others understand this investigation. To change the investigation description, enter the new investigation description and select Actions > Save.
• Investigation status: Shows the current investigation status.
• Investigation created: Shows the date and time when the investigation was created.

Delete an investigation

Delete investigations when they're no longer needed for your organization. When you delete an investigation, you also delete all components associated with the investigation, such as searches, investigation scopes, and mitigation plans. You can't recover a deleted investigation.

To delete an investigation, complete the following steps:

1. Go to the Microsoft Purview portal and sign in with the credentials for a user account assigned Data Security Investigations permissions.
2. Select the Data Security Investigations (preview) solution card, then select Investigations in the left navigation pane.
3. Select an investigation, then select Investigation settings.
4. On the Investigation settings page, select Actions, then select Delete investigations.