Proofpoint extends AI investigations to Microsoft 365

Proofpoint has announced two new communications intelligence capabilities aimed at helping security, compliance and legal teams investigate insider risk across human and AI activity.

Prism Investigator will now connect directly to Microsoft 365 - covering email, Teams messages and files - without requiring content to first sit in an archive.

Proofpoint said the integration reduces the manual export and staging that can slow investigations, allowing the tool to retrieve relevant content as a matter develops and correlate it with archived data, logs and other business records.

Separately, Proofpoint is extending its Human Communications Intelligence (HCI) agents to incorporate AI communications governance signals into its Insider Threat Management platform. The addition brings interactions with copilots, generative AI applications and AI agents into the context available to investigators, alongside existing behavioural and data activity signals.

"Security teams don't need another disconnected alert," said Harry Labana, senior vice president and general manager of digital communications governance at Proofpoint.

"While an alert can indicate what happened, it's communications intelligence that can explain the why. By extending intelligence across Microsoft 365 and interactions with AI, we're bringing that same depth of context to security, compliance, and legal investigations."