August 13, 2026 SaaS Alerts release notes

Ask AI - MSFT Agent

Enhancements

Added Microsoft 365 activity investigations

You can now ask the assistant about actions performed by a specific user or activity related to a file across Microsoft 365 services. The assistant can retrieve mailbox activity, SharePoint and OneDrive access and sharing events, Teams activity, and administrative operations recorded in Microsoft Purview audit logs. Searches require a date range and at least one filter, such as user, operation type, or record category. If auditing is not enabled, the assistant now reports that condition directly.

Expanded investigation visibility across Microsoft 365 services

Investigation workflows can now include mailbox actions, file access and sharing activity, Teams events, and administrative operations from Microsoft 365. Previously, investigations were limited primarily to directory changes and sign-in activity and relied on surrounding signals to infer user actions. Investigation reports can now identify the relevant activity directly when available.

Fixes

Resolved activity searches using display names

Activity searches could return no results when a display name was provided because audit log queries require a sign-in address. The assistant now resolves the user account before performing the audit log search.