platform-guideline checked
Access the Security Copilot audit log
Documents Security Copilot audit logs for admin events, activity metadata, prompt-response pairs, SIEM investigation, Purview DSPM access, permissions, retention, and compliance workflows.
Pattern Decisions This Source Supports
| Pattern | Supported decision | Required contract | Claim note |
|---|---|---|---|
| AI output audit trail | Choose AI output audit trail when the task is to inspect or prove how a specific AI-generated output was produced, changed, approved, copied, applied, exported, or retained. | Users can open the trail from the generated output, applied object, activity record, or investigation result without losing the answer identity. | Supports prompt-response pairs, activity metadata, admin events, retention, Purview DSPM access, SIEM investigation, and permission requirements. |
Evidence Role
This source is treated as platform-guideline evidence. Use it to validate the decision rules above, not as a visual style reference.
Publisher: Microsoft Learn. Last checked: .