Microsoft Purview compliance portal: Data Loss Prevention – Ability to fetch the original file resulting in policy match as evidence | customer managed storage

If you are an admin managing alerts and incidents, this new Microsoft Purview compliance portal feature will be of interest to you. It allows you to access a copy of the file that was restricted by DLP (Data Loss Prevention) which is uploaded to a customer managed storage (Azure blob). This original file can be used to analyze its contents to confirm the full set of data that was exfiltrated to assess severity, further assisting in the triage of alerts and incident management.

This feature is in the General Availability release phase, with a release date set for September CY2023. It is available on the web cloud instance for DoD, GCC, and GCC High platforms created on August 29, 2023. You can check roadmap ID 165301 for more information about this feature's upcoming releases.

The post Microsoft Purview compliance portal: Data Loss Prevention – Ability to fetch the original file resulting in policy match as evidence | customer managed storage was originally published on M365 Admin.