A Microsoft Purview view of the last 30 days of events involving sensitive or labelled items, for example a label being added, altered or taken off, or a DLP rule being triggered. Its data comes from the unified audit log.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Activity explorer in context, with comparison tables and the common traps.
Terms in this definition
- Microsoft Purview
Family of Microsoft products for data governance, security and compliance. Its Data Map stores only metadata, such as lineage, schema and classification, never the data itself.
- View
Shows a system through one chosen group of related concerns. No view is generic; each one is tied to whichever architecture it depicts.
- LAST
Restricted to visual calculations, this DAX function reads a value from the final position along one of the visual's axes. Writing INDEX(-1) gives the same result.
- Route table label
Name for a set of route tables in Virtual WAN hubs, used when choosing where routes propagate; Default, for instance, covers the defaultRouteTable of every hub.
- Microsoft Purview Data Loss Prevention
Policies in Purview that look for sensitivity labels or sensitive information types in content held in many places, including Microsoft 365 Copilot, and respond by auditing, warning or blocking. You can simulate a policy before enforcing it.
- Unified audit log
A record of what users and administrators do across numerous Microsoft 365 services, which can be searched with Microsoft Purview Audit. For core services, entries typically become available between one hour and an hour and a half after the activity.
Related terms
- Information Protection Analysts
People in this Microsoft Purview role group work with activity explorer and DLP alerts. They can look at, but not change, classifiers, sensitivity labels and DLP policies.
- Restricted administrator
An admin in a Purview role group whose scope is limited to assigned administrative units, managing policies just for those. They can't view historical data like alerts or Activity explorer, nor existing policies.