Educause Security Discussion mailing list archives
Microsoft DLP Report Fields
From: "Pardonek, Jim" <jpardonek () LUC EDU>
Date: Thu, 28 Jan 2021 19:09:49 +0000
Greetings, Shooting in the dark to see if anyone has an answer. We are trying to make some sense out of the reports that we can generate from our Microsoft DLP instance. There is an action column in the report and nowhere can I find what these mean. The fields are: SPAccessTimeControl SPSharingNotifyUser SPAccessTimeControl SPSharingNotifyUser SPAccessTimeControl SPSharingNotifyUser SPAccessTimeControl SPSharingNotifyUser NotifyUser We are also trying to track down what the last modified by column. For example, we have some rows in the report that show a last modified by someone that says they were not online the day the alarm was triggered. And when we check the file timestamp it hasn't been touched since 2010. The lack of documentation is somewhat frustrating. Thanks in advance for any assistance. Jim James Pardonek, MS, CISSP, CEH, GSNA Associate Director Chief Information Security Officer Loyola University Chicago 1032 W. Sheridan Road | Chicago, IL 60660 *: (773) 508-6086 Loyola University Chicago will never ask you for your username or password. For the latest information security news at Loyola, please follow us online, Twitter: @LUCUISO Facebook: https://www.facebook.com/lucuiso/ Our Blog http://blogs.luc.edu/uiso/ ********** Replies to EDUCAUSE Community Group emails are sent to the entire community list. If you want to reply only to the person who sent the message, copy and paste their email address and forward the email reply. Additional participation and subscription information can be found at https://www.educause.edu/community
Current thread:
- Microsoft DLP Report Fields Pardonek, Jim (Jan 28)