Microsoft Purview | Insider Risk Management: Enhancements to detection and triage

Originally posted by Microsoft Sep 16, 2022 Uncategorized 0 Comments

Enhancements to various security detection and triage experiences across Insider Risk Management including the ability to customize alerts during review, use a Sequence-as-a-policy-trigger, and create policies that will only generate alerts on content that is defined as a priority within the policy according to customers’ preferences. This release also includes new security detections for data exfiltration from a device using RDP connection as well as noise reduction from OneDrive/SharePoint Online file sync and download. Note: This update consolidates previously announced features from the following roadmap items: 88898, 88899, 88900, 88902. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.

Product
Release phase	General Availability
Release date	January CY2023 Preview date: October CY2022
Platform	Web
Cloud Instance	Worldwide (Standard Multi-Tenant)
Created	2022-09-14
Roadmap ID	98160
Roadmap Link	https://www.microsoft.com/microsoft-365/roadmap?featureid=98160