Microsoft Purview compliance portal: Data Loss Prevention – Ability to fetch the original file resulting in policy match as evidence | customer managed storage

Originally posted by Microsoft Aug 29, 2023 Uncategorized 0 Comments

In the alerts triage & incident management experience, the admin can access a copy of the file that was restricted by DLP. The original file is uploaded to a customer managed storage (Azure blob). The admin uses this data to analyze the contents to confirm the full set of data that was exfiltrated to assess severity.

Product
Release phase	General Availability
Release date	September CY2023
Platform	Web
Cloud Instance	DoD, GCC, GCC High
Created	2023-08-29
Roadmap ID	165301
Roadmap Link	https://www.microsoft.com/microsoft-365/roadmap?featureid=165301