Purview DLP Report 2.1.1

First public release.

Purview DLP Report reports the Exchange Online messages matched by a Microsoft Purview DLP rule — for example the messages sent to more than 25 recipients — as CSV and HTML files, one row per Message ID.

Highlights

• Source: Microsoft Purview Activity Explorer, filtered on the policy and the rule at the source.
• Local SQLite history beyond the 30 days of Activity Explorer; restartable collection, no duplicates, late events re-collected.
• CSV + self-contained HTML report: filters, Top 10 senders, message details; large periods split by day, week or rows.
• Interactive or certificate (app-only) authentication; least privilege with the Purview role Information Protection Reader (guide, Annex F).
• Read-only for Microsoft 365.

Download

PurviewDlpReport-2.1.1.zip contains only the files needed to run (no database, empty configuration) and the administrator guide as HTML. Unblock the files after download: Get-ChildItem -Recurse | Unblock-File.

Requirements

PowerShell 7.4+ · ExchangeOnlineManagement 3.9.0+ (not 3.10.0 in certificate mode, fixed in 3.10.1) · Windows Terminal recommended.

See CHANGELOG.md for the details.

Package updated on 2026-10-02

Same version, same files, no change to what the tool does: the README and the guide now start with a note to unblock the files downloaded from the Internet (Get-ChildItem "C:\Chemin\Du\Dossier" -Recurse -File -Force | Unblock-File). The Install-Module commands of the guide, and the one shown when ExchangeOnlineManagement is missing or unusable, use -Force, with what to do when an older module version still conflicts.