Microsoft Purview compliance portal: Enhancements to global exclusions in IRM settings

Vendor: Microsoft
Product: Microsoft Purview
Type: Security
Announcement date: 2025-03-31
Effective date: Date not published
Impact: Affected

In brief

What the source says

In this update, we are making the below enhancements to IRM exclusions to reduce alert noise. 1. Keyword logic update for email - An email will be excluded from scoring only when all the attachments match the keyword exclusions or email subject matches the keyword exclusions. This will be helpful to reduce the email signature noise which commonly contains keyword "image". 2. Keyword exclusions on both target and source file paths - For signals like file copied to removable media, keyword exclusions apply on both target and source file paths. 3. File path exclusions for removable media - We will start supporting file path exclusions for removable media. 4. Exclusion support for browser - Domain exclusions are now supported for browsing indicators. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. GA date: June CY2025 Launched General Availability GCC GCC High DoD Microsoft Purview Web

Continue from here

See other Microsoft Purview changes See the public price for Microsoft Purview Compare with my estate Ask a question

Read the primary source

Choose your reading

The role changes the reading angle, not the facts, date or level of evidence.

Reading for a salesperson

Who is affected: The audience described by the Microsoft update is represented by: Microsoft Purview compliance portal: Enhancements to global exclusions in IRM settings In this update, we are making the below enhancements to IRM exclusions to reduce alert noise. 1. Keyword logic update for email - An email will be excluded from scoring only when all the attachments match the keyword exclusions or email subject matches the keyword exclusions. This will be helpful to reduce the email signature noise which commonly contains keyword "image". 2. Keyword exclusions on both target a

Why it matters: The change matters because the official source describes: Microsoft Purview compliance portal: Enhancements to global exclusions in IRM settings In this update, we are making the below enhancements to IRM exclusions to reduce alert noise. 1. Keyword logic update for email - An email will be excluded from scoring only when all the attachments match the keyword exclusions or email subject matches the keyword exclusions. This will be helpful to reduce the email signature noise which commonly contains keyword "image". 2. Keyword exclusions on both target a

Urgency: Monitor

Next action: Review affected accounts with the customer using the official announcement.

Commercial opportunities

Use the verified change to open a scoped customer conversation.

Technical actions

Assess whether the documented change intersects the customer's current stack.

Questions to ask the customer

Does this documented change affect a product or workload in scope?

Risks and objections

The official source does not establish facts beyond the quoted material.

Points to confirm

The effective date is unknown and must be confirmed before scheduling action.

Evidence and traceability

Each excerpt is linked to the primary source and retained for verification.

Raw capture
2026-08-29T09:22:49.319599+00:00
Event
Microsoft Purview compliance portal: Enhancements to global exclusions in IRM settings In this update, we are making the below enhancements to IRM exclusions to reduce alert noise. 1. Keyword logic update for email - An email will be excluded from scoring only when all the attachments match the keyword exclusions or email subject matches the keyword exclusions. This will be helpful to reduce the email signature noise which commonly contains keyword "image". 2. Keyword exclusions on both target and source file paths - For signals like file copied to removable media, keyword exclusions apply on both target and source file paths. 3. File path exclusions for removable media - We will start supporting file path exclusions for removable media. 4. Exclusion support for browser - Domain exclusions are now supported for browsing indicators. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. GA date: June CY2025 Launched General Availability GCC GCC High DoD Microsoft Purview Web
source
Product Microsoft Purview
Microsoft Purview compliance portal: Enhancements to global exclusions in IRM settings In this update, we are making the below enhancements to IRM exclusions to reduce alert noise. 1. Keyword logic update for email - An email will be excluded from scoring only when all the attachments match the keyword exclusions or email subject matches the keyword exclusions. This will be helpful to reduce the email signature noise which commonly contains keyword "image". 2. Keyword exclusions on both target and source file paths - For signals like file copied to removable media, keyword exclusions apply on both target and source file paths. 3. File path exclusions for removable media - We will start supporting file path exclusions for removable media. 4. Exclusion support for browser - Domain exclusions are now supported for browsing indicators. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy. GA date: June CY2025 Launched General Availability GCC GCC High DoD Microsoft Purview Web
source
Insight a salesperson
Microsoft Purview compliance portal: Enhancements to global exclusions in IRM settings In this update, we are making the below enhancements to IRM exclusions to reduce alert noise. 1. Keyword logic update for email - An email will be excluded from scoring only when all the attachments match the keyword exclusions or email subject matches the keyword exclusions. This will be helpful to reduce the email signature noise which commonly contains keyword "image". 2. Keyword exclusions on both target and source file paths - For signals like file copied to removable media, keyword exclusions apply on both target and source file paths. 3. File path exclusions for removable media - We will start supporting file path exclusions for removable media. 4. Exclusion support for browser - Domain exclusions are now supported for browsing indicators. Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based on their own internal policies, governance, and organizational requirements. Built with privacy by de
source

Back to the public feed