On-demand scans are configured for sensitive information discovery
Overview
Section titled “Overview”Items in SharePoint, OneDrive and on Devices are evaluated and classified when they’re edited or touched. If they aren’t edited and they are in scope of a Microsoft Purview policy, they remain unclassified and invisible to Microsoft Purview policies. On-demand scans let you manually trigger evaluation of items across specified SharePoint, OneDrive, or Devices locations to discover and classify historical content. This can provide you with a more complete view of your information protection posture.
Remediation
Section titled “Remediation”Run it
Section titled “Run it”The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:
Install-Module ZeroTrustAssessment -Scope CurrentUserConnect-MaesterInvoke-Maester -Pack ZTA -SkipBuiltInLeave out -SkipBuiltIn to run Maester’s own checks in the same run.
About this check
| Severity | Medium |
| Effort to fix | Medium |
| Impact on users | Low |
| Pillar | Data, AI |
| Category | Information Protection |
| Product | Purview |
| Feature | Data classification |
| Area | Data protection |
| Licence | EXCHANGE_S_ENTERPRISE |
| Tenant | Workforce |
Product, feature, area and ATT&CK are Maester’s: the assessment does not record them, so Maester keeps them in the pack’s taxonomy.json.
A Microsoft check, part of the Zero Trust Assessment pack. Text from ZeroTrustAssessment 3.1.0, © Microsoft, MIT licence.