Implements and configures endpoint Data Loss Prevention controls to detect and prevent sensitive data exfiltration across email, USB, and cloud storage.
This skill provides a comprehensive framework for deploying endpoint Data Loss Prevention (DLP) agents and configuring content inspection policies. It guides users through the process of defining Sensitive Information Types (SITs) for PII, PHI, and PCI data, setting up monitoring for high-risk activities like USB transfers or cloud uploads, and implementing enforcement modes. By following structured workflows for tools like Microsoft Purview, it ensures organizations can meet compliance requirements such as GDPR and HIPAA while minimizing false positives through systematic audit and tuning phases.
主要功能
01Definition and custom pattern matching for Sensitive Information Types (SITs)
024,120 GitHub stars
03Monitoring controls for USB, cloud storage, printing, and clipboards
04Step-by-step Microsoft Purview DLP policy configuration and deployment
05Audit mode deployment strategies to minimize business productivity impact
06Incident response workflows for analyzing and remediating DLP alerts
使用场景
01Preventing intellectual property theft via removable media or personal cloud accounts
02Tuning DLP false positives and refining content inspection rules for enterprise environments
03Configuring automated data protection to comply with GDPR, HIPAA, or PCI DSS
