Forum Discussion

Gurdev Singh's avatar
Gurdev Singh
Iron Contributor
May 08, 2020

Custom Sensitive Info Type - Email Headers and Document Properties

Does the 'Sensitive Info Type' only find matches within the content of documents and emails or it can also match email headers or document properties? We are trying to create a 'Sensitive Info Type' that detects the sensitivity label applied to a document or email.

security

1 Reply

  • Joe Stocker's avatar
    Joe Stocker
    Bronze Contributor
    May 09, 2020
    as far as I know, DLP Sensitive Information types cannot inspect email headers or document properties. DLP Sensitive Information types are limited to the contents of the email, the contents of an attachment, or the contents of a document stored in SharePoint, OneDrive, Teams, or the contents of a message sent inside Teams chat.
    Depending on the scenario you are trying to achieve, you might consider document fingerprinting for Exchange Online:
    https://docs.microsoft.com/en-us/microsoft-365/compliance/document-fingerprinting?view=o365-worldwide
    or Trainable Classifiers:
    https://docs.microsoft.com/en-us/microsoft-365/compliance/classifier-getting-started-with?view=o365-worldwide
    Or using Exchange Online Transport rules to look for documents that have a Sensitive Information type in the document metadata.
    https://docs.microsoft.com/en-us/azure/information-protection/configure-exo-rules
    If these suggestions didn't help, can you explain your use case a bit further?

    Thanks,
    Joe Stocker

Resources