Get started with insider risk management forensic evidence (preview) - Microsoft Purview (compliance) | Microsoft Learn

https://learn.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-forensic-evidence-configure?WT.mc_id=EM-MVP-5003929&view=o365-worldwide