Proofpoint Expands AI Investigations into Microsoft 365

Proofpoint has expanded its AI-based investigation tools to cover Microsoft 365 and interactions with AI systems. The update, aimed at security, compliance, and legal teams investigating insider risk, includes two key elements: Prism Investigator and Human Communications Intelligence (HCI) agents.

Prism Investigator now connects directly to Microsoft 365 email, Teams messages, and files without requiring the material to be stored in an archive first. This allows investigators to examine live workplace communications alongside archived records, data, and logs.

The HCI agents extend Proofpoint's Human Communications Intelligence into insider threat investigations, bringing interactions with copilots, generative AI applications, and AI agents into the evidence considered when assessing employee actions.

Proofpoint argues that insider investigations now require more than conventional system alerts or access logs. By combining communications, behaviour, and data activity, organisations may be better placed to understand why a potentially risky event occurred, rather than simply identifying that it happened.