Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Ability to fetch the original file resulting in policy match as evidence (Microsoft managed storage)

Microsoft has introduced a new capability in its Purview Compliance Portal, enabling admins to store a copy of a file that triggered a Data Loss Prevention (DLP) policy match for analysis purposes. This feature helps admins to identify the data that was exfiltrated from the organization, and gauge the severity of the breach. Admins can opt for Microsoft managed storage by selecting it in the endpoint DLP settings, removing the need for additional configuration details typically required for customer managed storage. The general availability release date for the new feature is January CY2025, with a preview available in November CY2024.

The post Microsoft Purview compliance portal: Endpoint Data Loss Prevention – Ability to fetch the original file resulting in policy match as evidence (Microsoft managed storage) appeared first on M365 Admin.