Can Office 365 DLP scan for password protected compressed files and Office Files

[Marvin Oco]

Can Office 365 DLP scan for password protected compressed files and Office Files?

thanks

[#2]

Nope. But you can define an action to take on "inaccessible" files.

[#3]

@Vasil Michev How do we scope those "inaccessible files" in DLP Policy?

[#4]

You have to add an "​Any email attachment's content could not be scanned​" or "​Attachment is password protected​" type of condition.

[#5]

Hi @Vasil Michev 

I tried but there is no option for "​Any email attachment's content could not be scanned​" or "​Attachment is password protected​" in DLp conditions:

[#6 · Accepted solution]

Look below that, the "add a condition" button, as it's a new Condition.

[#7]

thanks @Vasil Michev 

[#8]

@Vasil Michev  Any reference article for this? 

[#9]

@Marvin Oco 

Based on my testing Microsoft 365 Purview DLP policy can detect sensitive content even the file is protected by password. Take note I'm refering to a data at rest and not data on transit. So I created a sample work documents with sample credit card number and I apply password protection on the documents. I uploaded the file in my OneDrive for Business, and moments later I save the Policy tips saving the file contains Credit Card numbers.. So yeah DLP can scan files protected by password. Another test is I compressed a documents that contrains Credit Card number (But the file is not password protected) and upload it in my OneDrive for Business, again the same result my DLP policy is able to scan the zipped files.