1,646 questions
@Francesco Russo - Thanks for the question and using MS Q&A platform.
It sounds like you are trying to track data loss in Microsoft Purview, but you are not seeing the expected results in the Activity Explorer.
The Activity Explorer in Purview provides a view of the activities that have occurred in your organization, including the application of labels and the match of policies. However, it does not provide detailed information about file access or email content copying.
To track file access and email content copying, you may need to use other tools in the Microsoft 365 suite, such as Microsoft Cloud App Security or Microsoft Information Protection. These tools can help you monitor and protect your data across different applications and services, including email and file sharing.
Here are some steps you can take to track data loss in Microsoft Purview:
- Define your data loss prevention (DLP) policies. Use the Purview Policy Manager to define policies that help you identify and protect sensitive data in your organization. You can create policies that look for specific types of data, such as credit card numbers or social security numbers, and apply labels or take other actions when the data is found.
- Monitor policy matches in the Activity Explorer. Use the Purview Activity Explorer to monitor policy matches and label applications in your organization. This can help you identify areas where sensitive data may be at risk and take steps to protect it.
- Use other Microsoft 365 tools to track file access and email content copying. Use tools such as Microsoft Cloud App Security or Microsoft Information Protection to monitor file access and email content copying across different applications and services. These tools can help you identify potential data loss events and take steps to prevent them.
Hope this helps. Do let us know if you any further queries.
If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.