Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Ability to fetch the original file resulting in policy match as evidence (customer managed storage)

Originally posted by Microsoft Oct 29, 2024 Uncategorized 0 Comments

In the alerts triage and incident management experience, the admin can access a copy of the file that was restricted by DLP. The original file is uploaded to a customer managed storage (Azure blob). The admin uses this data to analyze the contents to confirm the full set of data that was exfiltrated to assess severity.

Product
Release phase General Availability
Release date November CY2024
Platform Web
Cloud Instance DoD, GCC High
Created 2024-10-29
Roadmap ID 429871
Roadmap Link https://www.microsoft.com/microsoft-365/roadmap?featureid=429871

Comments are closed.

Joao Ferreira

I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.

%d bloggers like this: