Hybrid work environments have introduced new vulnerable access points to organizations’ data and credentials, requiring improvements in credential security to help prevent the risk of cyber-attacks. ...
Updated Jul 18, 2022
Version 1.0
Blog Post
4 MIN READ
Microsoft Purview Information Protection now includes enhanced security for detection of credentials
Raju321 :
M365 Enterprise E5 license should enable you to take advantage of Defender for Cloud Apps. For Office365 A5 plans, it can be added on as an additional package. A comprehensive comparison of these license can be found in 2 places: https://www.microsoft.com/en-us/microsoft-365/compare-microsoft-365-enterprise-plans and https://edudownloads.azureedge.net/msdownloads/Microsoft-Modern-Work-Plan-Comparison-Education_11-2021.pdf
thommck-on-twitter :
The actual credential content visibility is gated by https://docs.microsoft.com/en-us/microsoft-365/compliance/microsoft-365-compliance-center-permissions?view=o365-worldwide. I don't believe any new permissions were created for credentials/secrets content review. Essentially, those admins that can review other sensitive info content (SSNs, CC numbers, etc.) are able to review credential content in the same tooling. This is a scenario that we're tracking as we move forward with Public Preview to identify any additional needs.