DLP Passwords

Question

I am currently configuring DLP for my company, I understand the concepts and I have already configured Directives with types of confidential information to detect contracts, credit cards, IP, IDs, documents with a label and quotes. However I do not know how I could do the passwords because in my company the passwords do not follow a pattern, any expert who can give me a light and / or guide me in this process.

Answer 1

@Daniel Herrera - ExperTech - Thanks for the question and using MS Q&A platform.

It's great to hear that you are configuring DLP for your company. Regarding your question about detecting passwords, it's important to note that detecting passwords can be a bit tricky since they don't follow a specific pattern. However, there are some best practices that you can follow to help detect passwords.

One approach is to create a custom sensitive information type that includes a list of common passwords. You can create a custom sensitive information type by going to the "Sensitive information types" section in the Microsoft 365 compliance center. From there, you can create a new custom sensitive information type and add a list of common passwords to it.

Another approach is to use regular expressions to detect passwords. Regular expressions are patterns that can be used to match text. You can create a regular expression that matches common password patterns, such as a minimum length, a combination of letters, numbers, and special characters, and so on.

For more details, refer to Microsoft Purview: Create custom sensitive information types

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.