SharePoint Stuff

Microsoft Purview

Updates listed under this heading combines the following products: Azure Information Protection, Microsoft compliance center, Information Protection, Microsoft Defender, Microsoft Intune, Security & Compliance center and Cloud App Security:

• Launched (1)
• Rolling out (3)
• In development (39)

🍾 LAUNCHED

• Microsoft Purview | Data loss prevention: Contextual evidence match for Endpoint DLP – With this update you will be able to see the matched sensitive information type and the context surrounding it (300 characters) as a result of a DLP policy match on your endpoint devices. Now available in public preview. Roadmap ID:98095

🚂 ROLLING OUT

• Microsoft Purview | Compliance Manager: Microsoft Defender for Cloud (MDC) integration – Compliance Manager now integrates with Microsoft Defender for Cloud, allowing customers to assess their compliance posture across Microsoft 365, Azure, Google Cloud Platform, and Amazon Web Services with resource-level testing and cloud-specific guidance. Roadmap ID:102404
• Microsoft Purview compliance portal: eDiscovery (Premium) – Review set grouping usability enhancements – This feature aims to improve the user experience for reviewing and grouping related items in the eDiscovery (Premium) review sets. It includes a new interface for grouping family items for emails, documents, conversations, and attachments. It also includes a new interface for reviewing duplicates and related items together on a single page. Roadmap ID:115470
• Microsoft Purview compliance portal: Compliance Manager – Salesforce & Zoom Connectors – Compliance Manager now integrates with Salesforce and Zoom, empowering customers to continuously monitor their compliance posture across their data estate. Roadmap ID:124884

⌛ IN DEVELOPMENT

• Microsoft Purview compliance portal:  Insider Risk Management – Integration with Communication Compliance – Enrich Insider Risk Management signals by integrating a Communication Compliance triggering event during policy configuration. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, security and policy violations, and more. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=93259
• Microsoft Purview compliance portal: Data Lifecycle Management: Simulation mode for automatically applied retention labels (U.S. government clouds) – Records Management admins will be able to simulate the results of an auto-apply retention label policy. This feature allows admins to test the policy before deploying it in production. It will work with the Sensitive Information Type (SIT) and KQL properties policy types. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=109569
• Microsoft Purview compliance portal: Insider Risk Management – Alert triage experience (U.S. Government clouds) – This update introduces various improvements to the alert triage experience to accelerate time to action, including the ability to further drill into detected sequences within activity explorer, new alert filtering capabilities, and an enhanced user activity timeline view with a richer alert history. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117601
• Microsoft Purview compliance portal: Insider Risk Management – Alert triage improvements – user context during alert review – While reviewing an alert, analysts and investigators can quickly reference more user context details, such as the detected event and the activities that generated the alert. These additional details can provide context that may be relevant to determining if an alert should be escalated for further investigation. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117602
• Microsoft Purview compliance portal: Insider Risk Management – Cumulative exfiltration detection – Cumulative exfiltration detection helps identify data exfiltration risks when a user’s exfiltration activities across all egress channels over the past 30 days exceed organization or peer group norms. A risk score is assigned if the user’s cumulative exfiltration activity is unusual compared with others within the same organization or with the same role. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117603
• Microsoft Purview compliance portal: Insider Risk Management – Enhancements to sequences for unallowed and allowed domains – With this update, sequence detection in Insider Risk Management will recognize both allowed and unallowed domains. Sequences that involve allowed domains will be excluded from being scored, and sequences that involve unallowed domains will receive higher risk scores. With this update, sequence detection in Insider Risk Management will recognize both allowed and unallowed domains. Sequences that involve allowed domains will be excluded from being scored, and sequences that involve unallowed domains will receive higher risk scores. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117604
• Microsoft Purview compliance portal: Insider Risk Management – Physical access indicators and connectors – This feature allows admins to define priority physical assets. With priority physical assets enabled and the physical badging data connector configured, Insider Risk Management can correlate signals from an organization’s physical control and access systems with other user activities to help make more informed response decisions for alerts. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117607
• Microsoft Purview compliance portal: Insider Risk Management – Policy customization from alert review experience – This feature allows admins to customize an Insider Risk Management policy and adjust policy thresholds from within the alert review experience instead of going through the policy configuration wizard, so customization decisions can be made in the context of alert review activities. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117608
• Microsoft Purview compliance portal: Insider Risk Management – Sequence-as-a-policy trigger (U.S. Government clouds) – Admins can customize data leak policies to be detected when a user performs a sequence. For example, if admins select a sequence (such as download from Microsoft 365 location, obfuscate, exfiltrate, then delete), users who perform the sequence of activities will trigger the policy and the alert will show up in Insider Risk Management. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124772
• Microsoft Purview compliance portal: Insider Risk Management – Sequences policy configuration enhancements – With this enhancement, admins can now select sequences in data leak and data theft policies without the requirement to select underlying individual indicators. This will allow admins to create more targeted policies with improved alert signals. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124775
• Microsoft Purview compliance portal: eDiscovery (Premium) – Review set: Advanced filters – Updates to eDiscovery (Premium) review filters experience that allow admins to construct compound nested filters with either “AND” or “OR” conditions, go back and forth (undo/redo) between different iterations of filters, manage saved filter queries without navigating to a different panel, and use “Is empty/Is not empty” condition for each filter. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124796
• Microsoft Purview compliance portal: Information Protection – Label footers enhancement for emails – When labels are configured to add footers, currently the footers accumulate at the very bottom of long email chains. This enhancement now adds footers at the bottom of the most recent reply instead of at the bottom of the whole email thread. Note that this feature supports emails formatted as HTML or PlainText. Support for Rich Text email formats is legacy and will not be improved in Outlook. For emails formatted as Rich Text, label footers will continue to accumulate at the bottom of email threads as before. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124816
• Microsoft Purview compliance portal: eDiscovery (Premium) – Enhanced support for Teams video clips – Now eDiscovery admins collecting Teams video clips will see the teams video clip as a separate video recording file attached to the Teams conversation where it was shared. This will enable review and export as mp4 files to help admins better understand the content and context of the video clips. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124848
• Microsoft Defender for Office 365: Priority Account User tags filtering in the URL protection report – We are adding a new filter to the URL protection report that will allow security admins to easily filter for Users who are in the Priority Account tag of their organization. This capability will be extremely valuable in helping security teams prioritize focus on critical individuals within the organization while reviewing the URL threat details in the report. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124852
• Microsoft Purview compliance portal: Insider Risk Management – Bulk import and export of domains – This feature will allow admins to upload or download a CSV file of unallowed, allowed, and third-party domains defined by admins with the right permissions in insider risk settings to fine-tune the detection of activities involving certain domains. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: June CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124857
• Microsoft Purview compliance portal: Insider Risk Management – Sensitivity label downgrade activities – Insider Risk Management can detect users downgrading sensitivity labels on files or SharePoint sites. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.Release: June CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124860
• Microsoft Purview compliance portal: Insider Risk Management – Site URL and keyword exclusions – Enable admins to reduce signal noise by configuring SharePoint site URLs and keywords exclusions, so activities involving these sites, or file names and email subject lines containing certain keywords won’t generate alerts. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.Release: June CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124861
• Microsoft Purview compliance portal: Insider Risk Management – Sensitive information type exclusion – Enable admins to reduce signal noise by defining sensitive information type exclusions, so files that contain certain sensitive information types won’t generate alerts. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.Release: June CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124862
• Microsoft Purview compliance portal: Insider Risk Management – File path exclusions – Enable admins to reduce signal noise by configuring file path exclusions, so activities around files with specific file paths won’t generate alerts. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.Release: June CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124863
• Microsoft Purview compliance portal: Insider Risk Management – Peer group anomaly detection – With this update, Insider Risk Management can detect exfiltration anomalies when compared with users in similar groups or roles. Insider Risk Management defines similar user groups by grouping together users who access the same SharePoint Online destinations, who are in the same team, or who have similar job titles as configured in Azure AD. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.Release: June CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124864
• Microsoft Purview compliance portal: Data Lifecycle Management – Disposition review auto-approval (U.S. Government clouds) – Admins can enable automatic approval of items pending disposition if the reviewer doesn’t act within a specified number of days. Items will advance to the next stage of approval or auto-approved for deletion if in the final stage.Release: June CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124880
• Microsoft Purview compliance portal: Auditing for Microsoft Project, Planner and Microsoft To Do – Identify data risks and manage regulatory compliance requirements while using Planner, Project and To Do with audit log retention and access to crucial events that help determine scope of compromise. Release: June CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124916
• Microsoft Purview compliance portal:  eDiscovery (Premium) – Identify Teams as data sources – Simplified picking of relevant Teams and channels (standard, private, and shared) to intelligently identify associated custodian mailboxes, group mailboxes, OneDrive for Business accounts, and SharePoint sites that may contain Teams data that’s relevant to your case.  Release: July CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=88815
• Microsoft Purview | eDiscovery (Premium): Jobs report (U.S. government clouds) – eDiscovery administrators can access an aggregate report for all eDiscovery jobs across the tenant. This provides additional detail on the total number of jobs to ensure limits are not exceeded.Release: July CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=101525
• Microsoft Purview compliance portal: Data Loss Prevention – Protect sensitive text when it is shared through Web forms – This Microsoft Purview Data Loss Prevention for endpoint capability extends data protection controls for sensitive files and unsanctioned sites to also include sensitive data that’s shared through text (such as pasted into a Web survey form).Release: July CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=109586
• Microsoft Purview compliance portal: Information Protection – New contextual predicates in service-side auto-labeling – This feature will support adding the following new contextual based predicates to auto-labeling: Document property is; File extension is; Document size equals or is greater than; Document created by (only available in advanced rules in OneDrive and SharePoint locations); Document name contains words or phrasesRelease: July CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117536
• Microsoft Purview compliance portal:  eDiscovery (Premium) – Identify Teams as data sources (U.S. Government clouds) – Simplified picking of relevant Teams and channels (standard, private, and shared) to intelligently identify associated custodian mailboxes, group mailboxes, OneDrive for Business accounts, and SharePoint sites that may contain Teams data that’s relevant to your case. Release: August CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=93270
• Microsoft Purview compliance portal: Audit Custom Activities Search (U.S. Government clouds) – The Audit Custom Activities Search enables customers to search for specific operations in the audit log. Instead of having to use PowerShell queries to search for a specific activity or select from the events in the Activities drop-down menu, admins can use the custom search bar to search for several audit log events directly.Release: August CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124913
• Microsoft Purview compliance portal: Communication Compliance – Enhanced investigation and remediation experience – Introducing enhancements to the investigation and remediation workflows to help designated investigators facilitate quicker and better-informed actions on policy matches. Enhancements will be available to designated Communication Compliance admins and investigators with the appropriate role-based access control permissions, and include bulk policy exports, interactive how-to demos, and additional context around policy settings and keywords/conditions flagged in a policy. Microsoft Purview Communication Compliance provides the tools to help organizations detect regulatory compliance violations (e.g. SEC or FINRA), such as sensitive or confidential information, harassing or threatening language, and sharing of adult content. Built with privacy by design, usernames are pseudonymized by default, role-based access controls are built in, investigators are opted in by an admin, and audit logs are in place to help ensure user-level privacy.Release: August CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124929
• Microsoft Purview compliance portal: Audit (Premium) – Customized retention policies for 10-Year Audit Log Retention Add On (U.S. Government clouds) – This feature will enable customers with the 10-Year Audit Log Retention Add On for Microsoft Purview Audit (Premium) to create additional customized retention policies. The new options are 7 days, 30 days, 3 years, 5 years, and 7 years retention. Release: September CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=115502
• Microsoft Purview compliance portal: Data Loss Prevention – apply protection at the time of egress on endpoints – Extend protection to cold/unclassified files on endpoint devices by just-in-time protection at the time of egress.Release: September CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117493
• Microsoft Purview compliance portal: eDiscovery (Premium) – CMK (Customer Managed Keys) encryption support for data at-rest in Review sets – This release of eDiscovery features the implementation of customer-managed key (CMK) options, allowing users to manage their own encryption keys for the data stored in eDiscovery review sets in addition to the default, strong Microsoft-managed encryption already in place.Release: September CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117569
• Microsoft Purview compliance portal: Insider Risk Management – Saved views in activity explorer – During an alert investigation, analysts usually use various filters and columns in activity explorer to understand the risk activities that may lead to potential data security incidents. With this update, an Insider Risk Management analyst can quickly use a previously configured combination of filters and columns with one click. This can help analysts efficiently work through recurring activities without manually setting up filters every time. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: September CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117609
• Microsoft Purview compliance portal: Insider Risk Management – Activity explorer export limit increase – The activity explorer’s export limit will increase from 10K to 100K records. This update will benefit organizations that prefer exporting user activity insights to a CSV file, as they now can filter, sort, or pivot a bigger data set more conveniently. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.Release: September CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124858
• Microsoft Purview compliance portal: Information Protection – New contextual predicates in service-side auto-labeling (U.S. Government clouds) – This feature will support adding the following new contextual based predicates to auto-labeling: Document property is; File extension is; Document size equals or is greater than; Document created by (only available in advanced rules in OneDrive and SharePoint locations); Document name contains words or phrasesRelease: October CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=117537
• Microsoft Purview compliance portal: Insider Risk Management – Static alert and case IDs – Insider Risk Management will provide static alert and case IDs to help admins track and communicate investigation progress with colleagues more easily. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.Release: February CY2024Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124777
• Microsoft Purview compliance portal : Insider Risk Management – Bring your own detections – Allow customers to bring their own user activity indicators from homegrown, SIEM/UEBA platforms, or other line-of-business applications, and leverage them in existing Insider Risk Management playbooks. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: May CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=122278
• Microsoft Purview compliance portal: Insider Risk Management – Granular exclusion – Granular exclusion allows admins to adjust and fine tune indicators according to organizational preferences to help tailor the detection of risks that may lead to a potential security incident. For example, admins can configure the indicator “sending email with attachments to recipients outside the organization” to only detect emails sent to personal domains (e.g., outlook.com). In that way, admins can reduce the number of false positives. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies to manage security and compliance. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. Release: May CY2023. Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124779
• Microsoft Purview compliance portal: Endpoint DLP – Authorized USB devices (U.S. Government clouds) – With this capability, you can create groups of USB devices and designate restrictive actions for each group within your DLP policy in Microsoft Purview Data Loss Prevention. As an example, you will be able to create authorized or unauthorized groups of USB devices based on serial numbers and allow ‘copy’ of documents to certain groups of USB devices and block ‘copy’ for others. Release: May CY2023Link: https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=124828

---

Pages: 1 2 3 4