↳ GitHub sourceConnector

Microsoft Purview Information Protection

Description

Microsoft Purview Information Protection helps you discover, classify, protect, and govern sensitive information wherever it lives or travels. Using these capabilities enable you to know your data, identify items that are sensitive and gain visibility into how they are being used to better protect your data. Sensitivity labels are the foundational capability that provide protection actions, applying encryption, access restrictions and visual markings. Integrate Microsoft Purview Information Protection logs with Microsoft Sentinel to view dashboards, create custom alerts and improve investigation. For more information, see the [Microsoft Sentinel documentation](https://go.microsoft.com/fwlink/p/?linkid=2223811&wt.mc_id=sentinel_dataconnectordocs_content_cnl_csasci).
Declared status
2
Declared author / publisher
Microsoft

Declared sources

Metadata from the source file. No dependencies inferred from KQL.

Data types

Declared permissions

read and write permissions.
Workspace
Workspace
License
Enterprise Mobility + Security E5/A5 or Microsoft 365 E5/A5 or P2

Connector instructions

Content published in the repository. Refer to the original file for all parameters.

Connect Microsoft Purview Information Protection audit logs to Microsoft Sentinel

Related content

Links established from declared identifiers and solution manifests.

Source provenance

GitHub

Displayed values come from files in Azure/Azure-Sentinel. They describe the published template, not your workspace configuration.

Source identifier
MicrosoftPurviewInformationProtection
Additional source files 2Solutions/Microsoft Purview Information Protection/Data Connectors/MicrosoftPurviewInformationProtection.jsonsource ↗Solutions/Microsoft Purview Information Protection/Data/Solution_MicrosoftPurviewInformationProtection.jsonsolution-membership ↗
GSTEP / CATALOG TRACKING

Added to catalog : 16 Sept 2026 · 05:49 UTC
Last change observed : 16 Sept 2026 · 05:49 UTC

GSTEP sync dates, separate from the source content’s publication dates.