Microsoft Purview compliance portal: Insider Risk Management cumulative exfiltration tuning

Microsoft Purview Insider Risk Management is introducing a new feature called cumulative exfiltration tuning which aims to reduce the noise generated from alerts by not scoring previously detected activities. This feature will be generally available worldwide, GCC, GCC High, and DoD starting mid to late August 2024 and it will be enabled by default and accessible through the Microsoft Purview compliance portal. With this update, cumulative exfiltration activities will no longer be detected and scored if they have already been flagged in a previous cumulative exfiltration alert. This will help reduce unnecessary alerts and improve effectiveness. The Microsoft Purview Insider Risk Management solution is used to identify potential risks from IP theft, data leakage, and security violations by correlating various signals. The solution enables customers to create policies based on their own internal policies and organizational requirements. The rollout of this new feature requires no admin action and will happen automatically. Users may want to inform their team members about this change and update relevant documentation as appropriate. More information can be found in the Microsoft Purview compliance portal.

The post Microsoft Purview compliance portal: Insider Risk Management cumulative exfiltration tuning appeared first on M365 Admin.