Microsoft Purview | Endpoint Data Loss Prevention: Enhancements to the DLP capabilities on macOS endpoints

Originally posted by Microsoft Apr 25, 2024 Uncategorized 0 Comments

Microsoft Purview | Endpoint Data Loss Prevention is enhancing DLP capabilities on macOS with context-based classification and matched condition evidence for advanced classification. Rollout begins early May 2024, completing by mid-May. No admin action needed before rollout; security teams should be informed.

Coming soon for Microsoft Purview | Endpoint Data Loss Prevention: We are adding two new features to the DLP capabilities on macOS endpoints:

  1. Context-based classification
  2. Matched condition and short evidence for advanced classification

This message is associated with Microsoft 365 Roadmap ID 389378.

When this will happen:

General Availability (Worldwide): We will begin rolling out early May 2024 and expect to complete by mid-May 2024.

How this will affect your organization:

  1. Context-based classification: Admins will be able to use contextual parameters (FileType Is, FileExtension Is) as DLP policy conditions. Admin can define these parameters individually or in conjunction with content-based conditions.
  2. Matched conditions and short evidence for advanced classification: Matched conditions show the cause of flagged DLP policy matches, providing admins with a more comprehensive investigation experience. To view this feature, go to the Alerts dashboard, select the Events tab, and then select the Details tab to review the condition and its corresponding matched value.

In the Purview compliance portal, select an event at Data Loss Prevention > Alert to review matched conditions:

admin settingsView image in new tab

What you need to do to prepare:

Learn more

This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your security team about this change and update any relevant documentation as appropriate.

Message ID: MC785023

Comments are closed.

Joao Ferreira

I've been working with Microsoft Technologies over the last ten years, mainly focused on creating collaboration and productivity solutions that drive the adoption of Microsoft Modern Workplace.

%d bloggers like this: