Trace prompts, actions, and outputs into an auditable review package.
Completed35 minAdvanced
Overview
Purview Audit and Investigation Chain
Trace prompts, actions, and outputs into an auditable review package.
Prerequisites
Audit evidence access
Investigation workflow reference
Workbook scenario context
Success Criteria
Audit chain reconstructed
Evidence attached
Reviewer notes completed
Guided Steps
Click a step to open detailed instructions, examples, copy-ready text, and step-specific notes.
0 of 2 completed0%
Completion gate
This step requires: evidence
Add step evidence before marking this step complete.
How to complete this step
Identify the prompt submission, resulting action, and relevant output or artifact in the audit tooling available to you.
Capture identifiers such as timestamps, operation names, policy results, and user or service context where appropriate.
Attach screenshots or notes that show the end-to-end trace for the workbook scenario.
Example
Example: capture the prompt event timestamp, the related action event, and the resulting output record in sequence so the investigation chain is easy to follow.
Copy-ready text
Prompt event:
Action event:
Output record:
Step notes
Step evidence
Upload or paste screenshots that are specific to this step.
Evidence Capture
Upload screenshots from disk, drag and drop them here, paste from clipboard, and keep evidence across refreshes.
Click here and press ⌘/Ctrl + V to paste an image
Evidence is stored locally in this browser and may be limited by browser storage quotas.
Limit: up to 6 images, 2 MB each, stored locally in this browser.
READYNo evidence added yet
Uploaded, dropped, or pasted screenshots will persist locally for this exercise.
Reviewer Notes
Export timestamp3/21/2026, 8:42:18 AM
Saved locally for this exerciseAwaiting changes
Export
Review package export
Generate a completion summary with reviewer metadata, narrative governance sections, embedded screenshots, and step-level workflow details.