Microsoft Purview compliance portal: Insider Risk Management – Cumulative exfiltration detection tuning

Microsoft Purview's Insider Risk Management now has an update that reduces unnecessary alerts generated from cumulative exfiltration activities. The update will no longer detect or score cumulative exfiltration activities if they have previously been identified in a prior cumulative exfiltration alert. Purview's Insider Risk Management is designed to identify and manage potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Users are pseudonymized by default, with role-based access controls and audit logs in place to promote user-level privacy. This update is slated for general availability in January CY2024 and has already been previewed in August CY2023.
To learn more about this update and other Purview compliance portal features, please visit the official Microsoft 365 roadmap or M365 Admin website.
The post Microsoft Purview compliance portal: Insider Risk Management – Cumulative exfiltration detection tuning originally appeared on M365 Admin.
Published on:
Learn moreRelated posts
Microsoft Purview compliance portal: Insider Risk Management – Policy deletion enhancement
Microsoft Purview Insider Risk Management has enhanced its policy deletion functionality to enable admins with the right permissions to delete...
Microsoft Purview compliance portal: Insider Risk Management- New reports page
Microsoft Purview is introducing a new reports page for Insider Risk Management, which will contain three charts available on the alerts page,...
Microsoft Purview compliance portal: Insider Risk Management- Enhancements to the unusual activity booster detection
Microsoft Purview Insider Risk Management has rolled out an enhancement to its unusual activity booster detection feature, which will now be a...
Microsoft Purview compliance portal: Insider Risk Management – Ability to assign alerts & cases to an owner
This update to the Microsoft Purview compliance portal allows admins to assign cases or alerts to other admins, analysts and investigators, im...
Microsoft Purview compliance portal: Insider Risk Management – Cumulative exfiltration detection
Microsoft Purview compliance portal has unveiled a new feature, Cumulative Exfiltration Detection, for managing insider risk management. This ...
Microsoft Purview compliance portal: Insider Risk Management – Deduplication of signals
Microsoft Purview Insider Risk Management has introduced an update that addresses noisy alerts due to duplicate signals generated by a single ...
Microsoft Purview compliance portal: Insider Risk Management – Visualization of cumulative exfiltration trends
Microsoft Purview's Insider Risk Management tool has a new function that lets administrators examine activity that has occurred over time. Wit...
Microsoft Purview compliance portal: Insider Risk Management – Forensic evidence
The latest addition to the Microsoft Purview compliance portal's Insider Risk Management capabilities is the forensic evidence add-in. This op...
Microsoft Purview | Insider Risk Management: Enhancements to detection and triage
The latest update to Microsoft Purview Insider Risk Management brings several enhancements to its security detection and triage experiences. A...