Microsoft Purview compliance portal: Insider Risk Management – Sequence detections for obfuscation involving excluded events

This change enhances sequence detection to improve its effectiveness in identifying users who are performing obfuscation activities that may result in a data security incident, such as file renaming, to evade detection. With this improvement, Insider Risk Management can detect sequences that may result in potential data security incidents, even if the obfuscation activities in those sequences involve excluded events, such as an excluded keyword. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Product Release phase General Availability Release date January CY2024Preview date: August CY2023 Platform Web Cloud Instance Worldwide (Standard Multi-Tenant) Created 2023-05-31 Roadmap ID 124970 Roadmap Link https://www.microsoft.com/microsoft-365/roadmap?featureid=124970

The post Microsoft Purview compliance portal: Insider Risk Management – Sequence detections for obfuscation involving excluded events appeared first on M365 Admin.