Skip to content

Commit 3d17f16

Browse files
committed
Bug fix - 108043
1 parent 65ae538 commit 3d17f16

File tree

1 file changed

+11
-9
lines changed

1 file changed

+11
-9
lines changed

learn-pr/wwl-sci/create-manage-sensitive-information-types/includes/5-implement-document-fingerprint.md

Lines changed: 11 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,18 @@
11
Information workers in your organization handle many kinds of sensitive information during a typical day. Document Fingerprinting in Microsoft 365 makes it easier for you to protect this information by identifying standard forms that are used throughout your organization.
22

3-
Configuring a document fingerprint as a custom sensitive information type allows you to prevent unintended sharing of documents created from official company templates. For example, human resources documents, possibly containing personal information, or patent documents containing intellectual property may be identified by document fingerprinting even if the content doesn't meet other sensitive information type criteria.
3+
Document fingerprinting includes the following features:
4+
- DLP can use document fingerprinting as a detection method in Exchange, SharePoint, OneDrive, Teams, and Devices.
5+
- Document fingerprint features can be managed through the Microsoft Purview compliance portal.
6+
- [Partial matching](/microsoft-365/compliance/document-fingerprinting#partial-matching?azure-portal=true) is supported.
7+
- [Exact matching](/microsoft-365/compliance/document-fingerprinting#exact-matching?azure-portal=true) is supported.
8+
- Improved detection accuracy
9+
- Support for detection in multiple languages, including dual-byte languages such as Chinese, Japanese, and Korean.
410

5-
You've probably already guessed that documents don't have actual fingerprints, but the name helps explain the feature. In the same way that a person's fingerprints have unique patterns, documents have unique word patterns. When you upload a file, DLP identifies the unique word pattern in the document, creates a document fingerprint based on that pattern, and uses that document fingerprint to detect outbound documents containing the same pattern.
11+
Configuring a document fingerprint as a custom sensitive information type allows you to prevent unintended sharing of documents created from official company templates. Document fingerprinting can be used to identify certain types of documents, like human resources and patent documents. Even if these documents don't have obvious sensitive information, they may still contain personal information or intellectual property that can be identified through document fingerprinting.
612

7-
That's why uploading a form or template creates the most effective type of document fingerprint. Everyone who fills out a form uses the same original set of words and then adds their own words to the document. If the outbound document isn't password protected and contains all the text from the original form, DLP can determine if the document matches the document fingerprint.
13+
You have probably already guessed that documents don't have actual fingerprints, but the name helps explain the feature. In the same way that a person's fingerprints have unique patterns, documents have unique word patterns. When you upload a file, DLP identifies the unique word pattern in the document, creates a document fingerprint based on that pattern, and uses that document fingerprint to detect outbound documents containing the same pattern.
814

9-
> [!NOTE]
10-
> Document fingerprint only works with Exchange Online.
15+
That's why uploading a form or template creates the most effective type of document fingerprint. Everyone who fills out a form uses the same original set of words and then adds their own words to the document. If the outbound document isn't password protected and contains all the text from the original form, DLP can determine if the document matches the document fingerprint.
1116

1217
The following picture shows the basic functionality how document fingerprint functions.
1318

@@ -17,14 +22,11 @@ In this example, the patent template document contains the blank fields "Patent
1722

1823
The fingerprint is also saved as a data classification in Active Directory, as a security measure, because the original document itself isn't stored on the service, but only the hash value is stored, and the original document can't be reconstructed from the hash value. The patent fingerprint then becomes a sensitive information type that can be associated with a policy and any outbound emails containing documents created from the template that match the patent fingerprint, are detected.
1924

20-
Document Fingerprinting supports the same file types that are supported in mail flow rules, for which an overview can be found in the resources at the end of this module. Document fingerprinting won't detect sensitive information in the following cases:
25+
Document Fingerprinting supports the same file types that are supported in mail flow rules, for which an overview can be found in the resources at the end of this module. Document fingerprinting doesn't detect sensitive information in the following cases:
2126

2227
- Password protected files.
23-
2428
- Documents that only contain images.
25-
2629
- Documents that don't contain all the text from the original form used to create the document fingerprint.
2730

2831
> [!NOTE]
2932
> Neither mail flow rules nor Document Fingerprinting supports the .dotx file type, even if this is a common file type for Word documents.
30-

0 commit comments

Comments
 (0)