data classification

2 Topics

Curl API help
Got it working script below in reply I'm having some trouble with the Curl API I want to export all policy hits that are related to the "File containing PII detected in the cloud (built-in DLP engine)" policy. This is what I've go so far, but I can't get anything related to "policy" to work. -XGET -k "MYURL" -H "Authorization: Token MYTOKEN" -d ' { \"filters\": {\"policy\": {\"eq\": \"File containing PII detected in the cloud \(built-in DLP engine\)\"} }, \"limit\": 2\ }' It also fails with "https://salliemae.us.portal.cloudappsecurity.com/api-docs/#operators" as the api documentation says (but that looks like a typo) I when I swap out the policy for filename and it works. {\"filename\": {\"eq\": \"sheet002.htm\"}
Solved
Deleted
Aug 24, 2018 Place Microsoft Defender for Cloud Apps
2.6KViews
0likes
2Comments
Policy violation count update frequency
What is the policy violation count update frequency? During earlier testing I noticed that the count would only go up and wouldn't immediately go down after a file was deleted/updated to pass the policy. Originally I wrote it off as never going down but recently my test policy dropped to zero. How often does this value update?
Deleted
Aug 20, 2018 Place Microsoft Defender for Cloud Apps
1.2KViews
0likes
0Comments