How to exclude email signature scanning for exchange email DLP policy?

Question

Hello,I have created a policy to monitor sensitive data shared via exchange online. Due to email signature in the body there are a lot of false positive. How to exclude scanning of signature in the email body. Thanks

duliprb · Answer

Hi Sara_19&nbsp;What you can do is, if you find sensitive data in your email, add a NOT condition in SIT, if you are not sure how to do it, requesting you to reply back here.

duliprb · Answer

Sure arjun98854&nbsp;allow me little time

duliprb · Answer

Hi arjun98854, you can find this below screenshot. add Not condition, text that matches to particular SIT. Then problem will be solved. If you have any other requirement other than this, kindly let me know. Happy to assist. :)

duliprb · Answer

Hi arjun98854&nbsp;This is sensitive info type, once you finetuned this text, you can find combined text to identifiy the signature, other thing you can do is, rather identify a particular text using SIT You can also use trainable classifiers. Your email contains few things in the body. 1. Text 2. Signature, once you identified the signature you can excludd that from other text any help needed pls reply again:)

arjun98854 · Answer

I think its not possible.

Forum Discussion

How to exclude email signature scanning for exchange email DLP policy?

7 Replies

Resources