MC715687 - DLP: Adding matched attachment details in Activity Explorer for Data Loss Prevention rules in Exchange

Updated May 17, 2024: We have determined that this is a duplicate message. Please disregard this message and refer to MC709981 moving forward. We apologize for the inconvenience.

We are adding new fields in Microsoft Exchange to help prevent data loss. With these updates, admins can see more details about the attachments that are present in the email that violated the Data Loss Prevention (DLP) rules, including name, size, and labels. There will be new fields for the attachments that are in emails when they match a DLP rule that will be displayed in Activity Explorer, DLP Alerts, and Microsoft Theft Protection (MTP) Alerts. With these updates, you can get better insights into the violation that has occurred even before you start getting into the finer details of the issue.

This message is associated with Microsoft 365 Roadmap ID 369015

How this will affect your organization:

You will see more details about the attachments that are present in emails when violations occur.

Activity Explorer

DLP Alerts

MTP Alerts

What you need to do to prepare:

There is no action needed to prepare for this change. You may want to notify your users about this change and update any relevant documentation as appropriate.