Microsoft Purview - Evading Data Loss Prevention policies
Tags
| attack-pattern: | Data Domains - T1583.001 Domains - T1584.001 Sharepoint - T1213.002 Software - T1592.002 Tool - T1588.002 Vulnerabilities - T1588.006 |
Common Information
| Type | Value |
|---|---|
| UUID | d391c365-e8bf-4942-aba2-d3c3f09bb48f |
| Fingerprint | 35cbba0357f6ed05 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 18, 2024, 2:45 p.m. |
| Added to db | Dec. 18, 2024, 3:12 p.m. |
| Last updated | Dec. 21, 2024, 4:10 a.m. |
| Headline | Microsoft Purview – Evading Data Loss Prevention policies |
| Title | Microsoft Purview - Evading Data Loss Prevention policies |
| Detected Hints/Tags/Attributes | 39/1/18 |
Source URLs
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 43 | ✔ | NVISO Labs | https://blog.nviso.eu/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | Domain | 4 | www.nviso.eu |
|
| Details | Domain | 239 | learn.microsoft.com |
|
| Details | Domain | 4 | exiftool.org |
|
| Details | File | 1 | supersafe.docx |
|
| Details | File | 1 | exported.pdf |
|
| Details | File | 1 | supersafe.pdf |
|
| Details | File | 1 | verysupersafe.pdf |
|
| Details | Url | 2 | https://learn.microsoft.com/en-us/purview/purview |
|
| Details | Url | 1 | https://learn.microsoft.com/en-us/purview/dlp-policy-reference |
|
| Details | Url | 1 | https://learn.microsoft.com/en-us/purview/sit-sensitive-information-type-learn-about |
|
| Details | Url | 3 | https://exiftool.org |
|
| Details | Url | 1 | https://learn.microsoft.com/en-us/purview/trainable-classifiers-learn-about |
|
| Details | Url | 2 | https://learn.microsoft.com/en-us/purview/data-classification-overview |
|
| Details | Url | 2 | https://learn.microsoft.com/en-us/purview/insider-risk-management |
|
| Details | Url | 2 | https://learn.microsoft.com/en-us/purview/dlp-learn-about-dlp |
|
| Details | Url | 2 | https://learn.microsoft.com/en-us/purview/sensitivity-labels |
|
| Details | Url | 2 | https://learn.microsoft.com/en-us/purview/encryption-sensitivity-labels |
|
| Details | Url | 1 | https://learn.microsoft.com/en-us/defender-endpoint/device-timeline-event-flag |