Microsoft Purview compliance portal: Insider Risk Management – Visualization of cumulative exfiltration trends

When investigating an alert, admins can leverage the activity scatter plot to visualize a historical timeline of activity types, risk scores, and the sequence of events. To help organizations better visualize the growth of exfiltration over time, this new trend chart will show a user’s cumulative data exfiltration activity as it relates to other key signals like resignation date. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

(more…)

Microsoft Purview compliance portal: Insider Risk Management – Improved alert filtering

The update offers analysts and investigators the ability to filter out any activity that was already reviewed in a past alert for a user so they can focus their review on new activities that may lead to a data security incident. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

(more…)

Microsoft Purview compliance portal: eDiscovery (Premium) – Review set grouping usability enhancements

This feature aims to improve the user experience for reviewing and grouping related items in the eDiscovery (Premium) review sets. It includes a new interface for grouping family items for emails, documents, conversations, and attachments. It also includes a new interface for reviewing duplicates and related items together on a single page.

(more…)

Microsoft 365 Defender: Vulnerability Management

Microsoft Defender Vulnerability Management offers continuous discovery, intelligent risk-based prioritization, and built-in remediation to help security and IT teams prioritize and address critical vulnerabilities and misconfigurations. Microsoft Defender Vulnerability Management Add-On is available for Defender for Endpoint Plan 2 customers.

(more…)

Microsoft 365 Defender: Vulnerability Management

Microsoft Defender Vulnerability Management offers continuous discovery, intelligent risk-based prioritization, and built-in remediation to help security and IT teams prioritize and address critical vulnerabilities and misconfigurations. Microsoft Defender Vulnerability Management Add-On is available for Defender for Endpoint Plan 2 customers.

(more…)

Microsoft Purview compliance portal: eDiscovery – Certificate based authentication support for eDiscovery PowerShell cmdlets

Official support for eDiscovery PowerShell cmdlet with certificate-based authentication (CBA).

(more…)

Microsoft Purview compliance portal: New and enhanced Source Code trainable classifier

Coming soon, we’re rolling out a new and enhanced version of the Source Code trainable classifier.

This message is associated with Microsoft 365 Roadmap ID 115469.

(more…)

Microsoft Purview compliance portal: Communication Compliance – New built-in trainable and global classifiers (U.S. Government clouds)

This update includes new classifiers for use in Communication Compliance policies, including Corporate sabotage, Gifts & entertainment, Money laundering, Regulatory collusion, Stock manipulation, and Unauthorized disclosure. Microsoft Purview Communication Compliance provides the tools to help organizations detect business conduct and regulatory compliance violations (e.g. SEC or FINRA), such as sensitive or confidential information, harassing or threatening language, and sharing of adult content. Built with privacy by design, usernames are pseudonymized by default, role-based access controls are built in, investigators are opted in by an admin, and audit logs are in place to help ensure user-level privacy.

(more…)

Microsoft Purview compliance portal: Information Protection – Enhanced Source Code classifier

The enhanced Source Code trainable classifier includes support for partial/embedded code in Office files, support for 23+ programming languages and 30+ extensions, and high accuracy and low noise with as low as 20 lines of code. This classifier can be used by auto-labeling and data loss prevention policies to detect source code across the digital estate.

(more…)

Microsoft Purview compliance portal: eDiscovery (Premium) – Review set: List page usability enhancements

Get a detailed view of all the jobs, collections and exports associated with a review set. Group and filter by columns such as date range to quickly take action on the review set of your interest.

(more…)


I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.