The password is Pa$$w0rd

We have many useful tools against ransomware in Microsoft 365, but can Information Protection be one of them? My good friend Olav Tvedt took up this question the other day, and the inititial answer is no. But the again, it can also be yes, in a way. This is not something I have tested, but it is an interesting theory. Encryption will not stop ransomware from re-encrypting the data, but there is another thing it can do, that might have helped quite a few of the victims lately.  One of the awesome things about Information Protection is the way it protects data with the use of AAD authentication. We allow or deny people the access rights to a piece of information by their AAD accounts. And this is where we get a useful tool against ransomware. Not the attack itself, but what has been done to victims lately, where they have been threatened with getting sensitive data released to the dark web after the attack. For some this can be devastating, and this is where Information Protection can he

This is a question we get a lot, and I have not been able to find an article explaining this. In the DLP articles it usually just say that alerts will be shown under Data Loss Prevention - Alerts, which isn't the whole truth. I don't know if this has to do with when you created your tenant or something like that, but for some, these alerts just won't show up. In this blog post I will try to explain what needs to be done to get this working.  Prerequisites for DLP and logging.  I won't be going too deep into licensing here. If you want to know more, you can find it all in this article: Microsoft 365 Security&Compliance licensing guidance . We will just say that you will need an appropriate license for DLP. Now what kind you ask? Well, that depends. Do you want to use DLP for Microsoft Teams chat and channel messages? Then you would need Office 365 Advanced Compliance, which is available as a standalone option and is included in Office 365 E5 and Microsoft 365 E5 Co