Forum Discussion
Paul Stork
Nov 13, 2017MVP
Using PowerSehll to create DLP Policy Rules
Can anyone point me to more in depth information than what is presented in the New-DLPComplainceRule documentation on TechNet? I'm trying to create some complex policies using PowerShell. I've got ...
Paul Stork
Nov 14, 2017MVP
I was able to find the solution for my issue. Essentially there are two formats, a simple one and a complex one with groups and operators. The simple looks like this from a high level (and is documented in TechNet for the PowerShell command). It is an array of hashlist values and looks like this: -ContentContainsSensitiveInformation @(@{Name={GUID}; Mincount="1"; Maxcount="9"; Minconfidence="75"; Maxconfidence="100"},@{another hashlist of values}) This only covers the case where there are one or more Sensitive information types connected by an "OR" operator (which is the default). The more complex format that contains one or more groups of Sensitive Information types is three layers of Arrays of hashlists. It looks like this: -ContentContainsSensitiveInformation @(@{operator="And"; groups= @(@{operator="Or"; name="GroupName"; sensitivetypes= @(@{Same Hashlist contents as Sample1},@{Same Hashlist contents as Sample1})}, @{operator="Or"; name="Group Name"; sensitivetypes= @(@{Same Hashlist contents as Sample1},@{Same Hashlist contents as Sample1})})}) You must use this format even if you only want one group with two SIs connected by the operator "And". I haven't found any documentation on this at all, but it does work.