Data Loss Prevention – Adding matched attachment details in Activity Explorer for Data Loss Prevention rules in Exchange

Data Loss Prevention – Adding matched attachment details in Activity Explorer for Data Loss Prevention rules in Exchange

Microsoft is adding new fields in Microsoft Exchange to help prevent data loss. With these updates, admins can see more details about the attachments that are present in the email that violated the Data Loss Prevention (DLP) rules, including name, size, and labels. There will be new fields for the attachments that are in emails when they match a DLP rule that will be displayed in Activity Explorer, DLP Alerts, and Microsoft Theft Protection (MTP) Alerts. With these updates, you can get better insights into the violation that has occurred even before you start getting into the finer details of the issue.

When this will happen:

Preview: Microsoft will begin rollout in late February 2024 and expect to complete in early March 2024

Worldwide: Microsoft will begin rollout in early March 2024 and expect to complete in late March 2024.

How this will affect your organization:

You will see more details about the attachments that are present in emails when violations occur.

Activity Explorer:

DLP Alerts:

MTP Alerts:

What you need to do to prepare:

There is no action needed to prepare for this change. You may want to notify your users about this change and update any relevant documentation as appropriate.