Can I force a mcas file policy to run on-demand?

[dennisxu]

I created a file policy to scan OneDrive for a test file and remove the external sharing link. But I do not know when mcas will invoke this policy and do the scan.

1) How does one typically test MCAS file policy?

2) Is there a way to check when is the last time mcas did an API scan of OneDrive, and what is the next scheduled scan, or

3) does the user have the ability to perform an on-demand scan so I can test a particular policy right away?

4) Is there a way to view verbose file policy execution logs to see why policy doesn't pick up a sensitive file as the policy is designed to capture, to tune file policy? 

[#2]

@dennisxu 

Hi Denis, 

This capability is not available today but function we're planning on introducing in the product. 

1. The best way to test a file policy is to create a policy scoped to a specific user and/or application and then upload a file containing a sensitive information type. Once it's uploaded - you could search for it in the files page and see if it's been scanned and if there is match. 

2. We don't provide time frames however if you go to the files page -> click on a file -> you'll be able to see if it was scanned. 

3.On-demand scans are a functionality we're currently investigating and planning on bringing into the product. 

4. I would recommend looking at this document to see what the criteria is for us to identity a sensitive information type. 

https://docs.microsoft.com/en-us/microsoft-365/compliance/what-the-sensitive-information-types-look-...

[#3]

Thanks Banu!