microsoft/PAX purview-v1.7.1

Purview Audit Log Processor v1.7.1

Repository: microsoft/PAX

Tag: purview-v1.7.1

Published: 2025-10-20T12:47:35Z

Prerelease: no

Release notes:

Release Notes: v1.7.1

Release Information

• Version: 1.7.1
• Release Date: 2025-10-20 (Updated)
• Released By: Brian Middendorf (@microsoft)
• Previous Version: v1.7.0

---

Overview

Version 1.7.1 is a documentation-focused maintenance release that significantly improves the usability and navigability of the Purview Audit Log Processor documentation. This release introduces 33 strategically placed collapsible sections throughout the 2,100+ line documentation, making it dramatically easier to find specific information without overwhelming users with dense content blocks.

What Changed

• Documentation: Major usability improvements with collapsible sections
• Script: Version number updates (v1.7.0 → v1.7.1) in header and examples
• Infrastructure: Repository structure and branding enhancements

No functional changes to the audit log processing logic - all features from v1.7.0 remain unchanged and fully compatible.

---

Key Improvements

📖 Documentation Enhancements (33 Collapsible Sections Added)

Installation & Quick Start (4 sections)

Collapsed detailed installation steps and authentication methods to streamline getting-started experience:

• Prerequisites Checklist: System requirements, PowerShell version verification, and module dependencies now hidden by default
• Interactive Authentication: Step-by-step OAuth flow with screenshots collapsed to reduce visual clutter
• Certificate Authentication: Enterprise certificate setup procedures with security considerations
• Client Secret Authentication: App registration and secret management steps
• Service Principal Authentication: Automated pipeline configuration for CI/CD scenarios

Usage Examples (6 sections)

All command examples now collapsed for easier scanning:

• Basic Export: Simple date range extraction with default settings
• Array Explosion: Conversation message expansion examples
• Deep Explosion: Nested array flattening for analysis tools
• Replay Mode: Offline CSV re-processing demonstrations
• Performance Tuning: Streaming parameter optimization examples
• Live vs Replay Comparison: Side-by-side workflow differences

Agent Filtering (3 sections)

Consolidated agent-related documentation for focused reference:

• How Agent Filtering Works: Technical explanation of agent detection logic and filtering mechanics
• Agent Performance Metrics: Benchmark data showing filtering efficiency (processed 15,234 records → 8,901 agent-only in 12.3s)
• AgentsOnly vs ExcludeAgents: Comparison table with use cases and output expectations

User & Group Filtering (3 sections)

Organized user/group targeting features for privacy-conscious analysis:

• How User Filtering Works: Server-side (Live) vs client-side (Replay) filtering implementation details
• User/Group Performance Metrics: Efficiency data for targeting scenarios (10,000 records → 847 user-specific in 8.7s)
• Group Expansion Process: Distribution list and security group member resolution workflow

PromptFilter Deep Dive (4 sections)

Separated conversation turn isolation documentation:

• How PromptFilter Works: Two-stage filtering architecture (pre-explosion validation + during-explosion application)
• PromptFilter Modes Explained: Detailed breakdown of Prompt/Response/Both/Null modes with conversation examples
• PromptFilter + Agent Combinations: Advanced filtering scenarios isolating agent prompts vs human prompts
• PromptFilter Performance: Metrics showing conversation turn isolation efficiency (12,450 turns → 6,225 prompts in 14.1s)

Filter Combinations (5 sections)

Complex multi-filter scenarios now easy to find:

• UserIds + AgentsOnly: Isolate specific user's agent interactions
• GroupNames + PromptFilter: Analyze team conversation patterns
• Multiple Filters Together: Triple/quadruple filter combinations with practical examples
• Live Mode Filtering: Server-side efficiency optimizations
• Replay Mode Filtering: Client-side flexibility for offline analysis

Performance Tuning (4 sections)

Advanced optimization guidance separated from basic usage:

• Streaming Parameters Explained: StreamingSchemaSample and StreamingChunkSize mechanics
• Memory vs Speed Trade-offs: Configuration recommendations for different hardware profiles
• Large Dataset Strategies: Handling 100K+ record exports with memory constraints
• Benchmark Data: Real-world performance metrics across various configurations

Reference Tables & Lists (3 sections)

Collapsed dense reference materials:

• Use Case Matrix: Comprehensive filtering scenario table (15 common analysis workflows)
• Known Limitations: Current constraints and workarounds
• Troubleshooting Guide: Common error messages and resolution steps

🛠️ Script Updates

Version Reference Updates (53 lines changed):

• Updated header comment: # Portable Audit eXporter (PAX) - Purview Audit Log Processor - v1.7.1
• Updated all example commands throughout help documentation to reference PAX_Purview_Audit_Log_Processor_v1.7.1.ps1
• No functional code changes - all processing logic, parameters, and features identical to v1.7.0

Why Update Script Version? Even though no functional changes occurred, the script version was bumped to maintain consistency with the documentation release. This ensures users referencing the v1.7.1 documentation see matching script version numbers in examples, reducing confusion during troubleshooting.

🏗️ Repository Infrastructure

Folder Structure Standardization:

• Ensured consistent subfolder structure across all three parent folders (release_documentation/, release_notes/, script_archive/)
• Added product-specific branding to .gitkeep files:
• Parent folders: "PAX Solution Set" branding
• Purview subfolders: "Purview Audit Log Processor" branding
• Graph subfolders: "Graph Audit Log Processor" branding
• Created missing release_documentation/Graph_Audit_Log_Processor/PDF/ folder for future Graph releases

README.md Enhancements:

• Fixed Purview download link to use new tag format (purview-v1.7.1 instead of v1.7.1)
• Verified all documentation, release notes, and archive links point to...