Data Loss Prevention and Azure Information Protection...
summary
A technical deep dive into Azure Information Protection (AIP) and Office 365 Data Loss Prevention (DLP) showing practical bypasses. The talk demonstrates that DLP can miss reordered credit card numbers and cloud scanning delays cause brief leaks, explains AIP/EFS use per-user asymmetric keys and a policy blob, and presents Kali/Linux tooling and custom utilities that extract the AIP policy, replace encrypted payloads, and rewrap files to make protected documents editable.
AI-written summary · about
chapters (10)
- 0:00Wprowadzenie i agenda
- 4:42Dlaczego chronić dane
- 6:28Podstawowe metody ochrony danych
- 9:44Azure Information Protection wprowadzenie
- 13:52Wdrażanie polityk ochrony
- 17:52Demo ochrona wiadomości
- 24:14Szyfrowanie plików EFS
- 33:10Klasyfikacja dokumentów etykietami
- 39:09Demo szyfrowanie dokumentów
- 46:42Ograniczenia i podsumowanie
related talks
50mNotes from the field Microsoft Information Protection
49mDLP: An Implementation Story
01h 59mDeep Dive Workshop – Data Security and Data Protection
01h 59mDeep Dive Workshop – Data Security and Data Protection
17mExtend data security into multi-cloud apps and solutions
21mHow Microsoft IT "Does" Data Protection
55mAzure Attacks Unpacked: Real-World Threats & Lessons
30mThe Windows Data Protection API (DPAPI)