Activity explorer scan - can you filter by date (i.e. every quarter)

Question

Once I do a scan and it identifies files with sensitive data for Q1 and I want to do a scan for Q2, but I don't want to pick up the same sensitive files that were identified in Q1. I only want to identify the current (Q2) sensitive files is this a possibility?

Answer 1

@Mark Sannuti (C-Admin)

Thanks for reaching out to Microsoft Q&A.

Yes, it is possible to scan for sensitive files in Q2 without picking up the same files identified in Q1 using Microsoft Purview. You can achieve this by leveraging the incremental scan feature. Here’s a general approach:

Initial Scan (Q1):

• Perform a full scan to identify all sensitive files for Q1.
• Tag or label these files as “Q1 Sensitive”.

Subsequent Scan (Q2):

• Configure the scan to exclude files tagged as “Q1 Sensitive”.
• Perform the scan to identify new sensitive files for Q2.

This way, the scan will focus on identifying only the new sensitive files for the current quarter. You can set up these scans and manage the tags using Microsoft Purview’s data classification and labeling features.

Hope this helps. Do let us know if you any further queries.