Purview: Stopping exfiltration via DNA Tunneling attacks

Question

Hi,

We're looking to use MS Purview for DLP control.

One common method of data exfiltration is when DNS Tunneling is used. Can any tool with Purview specifically prevent this?

Many thanks :)

Shaun

Answer 1

@PARR Shaun - Thanks for the question and using MS Q&A platform.

Microsoft Purview is a data governance solution that provides a unified and integrated experience to discover, understand, and manage your data. It helps you to achieve a better understanding of your data and to ensure that your data is protected and compliant with regulations.

Regarding your question, Microsoft Purview does not have a specific feature to prevent DNS tunneling attacks. However, you can use Microsoft Defender for Endpoint to detect and prevent DNS tunneling attacks. Microsoft Defender for Endpoint is a unified endpoint security platform that provides advanced threat protection and endpoint detection and response capabilities. It can help you to detect and prevent DNS tunneling attacks by monitoring DNS traffic and identifying suspicious patterns.

For more details, refer to Microsoft Purview Data Loss Prevention Helps Detect and Prevent Exfiltration During Cyberattacks.

Hope this helps. Do let us know if you any further queries.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.