Services
Affected Platforms
Summary
Microsoft Purview | Endpoint Data Loss Prevention is enhancing DLP capabilities on macOS with context-based classification and matched condition evidence for advanced classification. Rollout begins early May 2024, completing by mid-May. No admin action needed before rollout; security teams should be informed.
Details
Coming soon for Microsoft Purview | Endpoint Data Loss Prevention: We are adding two new features to the DLP capabilities on macOS endpoints:
- Context-based classification
- Matched condition and short evidence for advanced classification
This message is associated with Microsoft 365 Roadmap ID 389378.
When this will happen:
General Availability (Worldwide): We will begin rolling out early May 2024 and expect to complete by mid-May 2024.
How this will affect your organization:
- Context-based classification: Admins will be able to use contextual parameters (
FileType Is,FileExtension Is) as DLP policy conditions. Admin can define these parameters individually or in conjunction with content-based conditions. - Matched conditions and short evidence for advanced classification: Matched conditions show the cause of flagged DLP policy matches, providing admins with a more comprehensive investigation experience. To view this feature, go to the Alerts dashboard, select the Events tab, and then select the Details tab to review the condition and its corresponding matched value.
In the Purview compliance portal, select an event at Data Loss Prevention > Alert to review matched conditions:
What you need to do to prepare:
This rollout will happen automatically by the specified date with no admin action required before the rollout. You may want to notify your security team about this change and update any relevant documentation as appropriate.
Learn more