data classification
7 TopicsIssues with Oracle Database Classification in Microsoft Purview
Hello, I'm testing the registration of an Oracle on-prem database with Microsoft Purview. The scan is running successfully and ingesting metadata, but it is not identifying any classifications. although this dataset is used with SQL Server and works properly, showing all the classifications, there is a section discussing this saying that If the user is not the owner of the table, the scan will run successfully and ingest metadata, but will not identify any classifications. https://learn.microsoft.com/en-us/purview/register-scan-oracle-source#required-permissions-for-scan But it's already done and the user have all the select roles and system roles. Could anyone help i don't know where is the problem Thanks in advance517Views1like2CommentsTrainable Classifiers - Tips
Hello All, Just sharing some tips to assist with the process of data collection and the creation of trainable classifiers for the purpose of labelling/Data Loss prevention. -Regarding training Machine Learning to recognize a certain document type, It must have one or more recognizable aspects. Possible usable recognizable aspects of the data/document type: Keyword or metadata values (keyword query language) Previously identified patterns of sensitive information like social security, credit card, or bank account numbers https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-entity-definitions https://learn.microsoft.com/en-us/purview/sit-document-fingerprinting: recognizing an item because it's a variation on a template The presence of exact strings https://learn.microsoft.com/en-us/purview/sit-learn-about-exact-data-match-based-sits#learn-about-exact-data-match-based-sensitive-information-types -In the below examples, we focus on Document Fingerprinting and Previously identifiable Sensitive information Type. For e.g. Regarding positive samples, The below file samples display a pattern, CC info (dummy data), Include Keywords referring to CC info such CVV2/AMEX etc.... as well as SSN information. -This can be regarded as a pattern for positive detection. The above data samples (about 150 samples of a similar pattern) are stored in a folder in a dedicated SharePoint Site(In the below screenshot, Same items are used as false samples for another classifier). -Regarding Negative samples, It is the same concept, It can be also stored in a folder in a dedicated Sharepoint Site and have a unique pattern or fingerprint. for e.g. -The below samples represent Credential information (dummy), Need to be about 150 samples or so. The samples should strongly represent a uniform document/data type different from positive samples. Similarly the data is stored in a dedicated folder in a SharePoint Site: Once the trainable classifier is created and fed this information, It will successfully identify data type to facilitate detection and minimize potential false positive.1.4KViews0likes2CommentsTrainable Classifiers
Hello, I am testing out trainable classifiers and need to know how to investigate training failures in detail? Some errors are vague such as "Failed due to training error" or "Invalidlocationserror" and clicking on review test results does not show details. Where is log stored? How can we review errors further? Any help is appreciated.963Views0likes3CommentsDefault Sensitivity Label to be added to migrated files (from Local Network Server)
Hi Experts, We are migrating our file-sharing services from a local network file server to MS Teams/SPO. The requirement is to enable and give default sensitivity labels from the migrated files. Manually assigning sensitivity labels in over a TB of files is hectic and could be prone to error as well. MS Purview MIP labels and label policies are configured, however, at present, only new documents and/or revised files are only having the sensitivity labels assigned. Any suggestions, guide, and tips will be highly appreciated. Thanks, Rhey937Views1like5CommentsImplementing Zero Trust: A Guide to Securing Your Data
Data protection is critical for organizations to ensure sensitive information is always protected. Implementing a Zero Trust strategy is an effective way to protect your data. In this guide, we will walk you through the three key components of a data protection strategy and the initial deployment goals for Zero Trust. Learn about what has to be considered to ensure your data is safe at all times, from discovering and classifying your data through monitoring and cleanup.5.9KViews4likes0CommentsCurl API help
Got it working script below in reply I'm having some trouble with the Curl API I want to export all policy hits that are related to the "File containing PII detected in the cloud (built-in DLP engine)" policy. This is what I've go so far, but I can't get anything related to "policy" to work. -XGET -k "MYURL" -H "Authorization: Token MYTOKEN" -d ' { \"filters\": {\"policy\": {\"eq\": \"File containing PII detected in the cloud \(built-in DLP engine\)\"} }, \"limit\": 2\ }' It also fails with "https://salliemae.us.portal.cloudappsecurity.com/api-docs/#operators" as the api documentation says (but that looks like a typo) I when I swap out the policy for filename and it works. {\"filename\": {\"eq\": \"sheet002.htm\"}Solved2.6KViews0likes2CommentsPolicy violation count update frequency
What is the policy violation count update frequency? During earlier testing I noticed that the count would only go up and wouldn't immediately go down after a file was deleted/updated to pass the policy. Originally I wrote it off as never going down but recently my test policy dropped to zero. How often does this value update?1.2KViews0likes0Comments