{"id":10635,"date":"2025-03-26T07:01:09","date_gmt":"2025-03-25T22:01:09","guid":{"rendered":"https:\/\/m365jp.net\/?p=10635"},"modified":"2025-03-26T07:05:50","modified_gmt":"2025-03-25T22:05:50","slug":"mc1006621-updated-microsoft-purview-insider-risk-management-new-compromised-user-context-in-microsoft-entra","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-03-26-mc1006621-updated-microsoft-purview-insider-risk-management-new-compromised-user-context-in-microsoft-entra","title":{"rendered":"MC1006621 | (Updated) Microsoft Purview | Insider Risk Management: New compromised user context in Microsoft Entra"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC1006621 | (Updated) Microsoft Purview | Insider Risk Management: New compromised user context in Microsoft Entra<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>stayInformed<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>03\/25\/2025 21:27:12<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>02\/15\/2025 04:48:59<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>06\/30\/2025 07:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>Updated March 25, 2025: We have updated the rollout timeline below. Thank you for your patience.<\/p>\n<p>Coming soon to Microsoft Purview | Insider Risk Management: IRM analysts will be able to identify if a user being investigated has any compromised user alerts in Microsoft Entra. The new visibility will help the analyst formulate the right response action,   such as escalating the Incident to SOC teams for quick remediation.  <\/p>\n<p>This message is associated with Microsoft 365 Roadmap ID <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=420938\" target=\"_blank\">  420938<\/a>.  <\/p>\n<p>[When this will happen:]  <\/p>\n<p>General Availability (Worldwide, GCC, GCC High, DoD): We will begin rolling out early April 2025 (previously mid-March) and expect to complete by late April 2025 (previously late March).  <\/p>\n<p>[How this will affect your organization:]  <\/p>\n<p>Microsoft Entra offers two types of compromised user detections:  <\/p>\n<ul>\n<li>Sign-in risk detections: Compromise risk associated with a specific sign-in  <\/li>\n<li>User risk detections: Compromise risk associated with a specific user  <\/li>\n<\/ul>\n<p>After this rollout:  <\/p>\n<ul>\n<li>Risk detections will be available in the indicator timeline in the alert investigation experience.    <\/li>\n<li>Risk detections will not impact the risk score or severity of Insider Risk Management alerts.  <\/li>\n<\/ul>\n<p>To access the new risk detections, go to Microsoft Purview portal &gt; <i>Settings &gt; Insider Risk Management &gt; Policy indicators &gt; Built-in Indicators.<\/i> Scroll down to  <i>Microsoft Entra ID Protection indicators,<\/i> open the dropdown menu and select the applicable indicators:  <\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/ccp\/en-us\/20b449d4-58a8-43bf-9fde-1f14d646f87d\">  <\/p>\n<p>When you create a policy, you will find Microsoft Entra ID Protection indicators on the  <i>Indicators<\/i> page:  <\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/ccp\/en-us\/e28ba3e8-f97c-4a13-968e-4f49196be3b5\">  <\/p>\n<p>This change will be available by default.  <\/p>\n<p>[What you need to do to prepare:]  <\/p>\n<p>This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update   any relevant documentation.  <\/p>\n<ul>\n<li>Insider risk management admins can opt into risk detections from Insider Risk Management global settings.    <\/li>\n<li>Insider risk management admins need to opt into risk detection in Insider Risk Management policies.  <\/li>\n<\/ul>\n<p>Microsoft Purview Insider Risk Management correlates various signals to identify potential malicious or inadvertent insider risks, such as IP theft, data leakage, and security violations. Insider Risk Management enables customers to create policies based   on their own internal policies, governance, and organizational requirements. Built with privacy by design, users are pseudonymized by default, and role-based access controls and audit logs are in place to help ensure user-level privacy.  <\/p>\n<p><i>Learn more <\/i>  <\/p>\n<ul>\n<li><a href=\"https:\/\/learn.microsoft.com\/entra\/id-protection\/concept-identity-protection-risks\" target=\"_blank\">What are risks in Microsoft Entra ID Protection &#8211; Microsoft Entra ID Protection | Microsoft Learn<\/a><\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/purview\/insider-risk-management-settings-policy-indicators?tabs=purview-portal\" target=\"_blank\">Configure policy indicators in insider risk management | Microsoft Learn<\/a><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p>2025 \u5e74 3 \u6708 25 \u65e5\u66f4\u65b0: \u4ee5\u4e0b\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8 \u30bf\u30a4\u30e0\u30e9\u30a4\u30f3\u3092\u66f4\u65b0\u3057\u307e\u3057\u305f\u3002\u3054\u7406\u89e3\u3044\u305f\u3060\u304d\u3042\u308a\u304c\u3068\u3046\u3054\u3056\u3044\u307e\u3059\u3002<\/p>\n<p>\u8fd1\u65e5\u516c\u958b\u4e88\u5b9a\u306e Microsoft Purview |\u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u7ba1\u7406: IRM \u30a2\u30ca\u30ea\u30b9\u30c8\u306f\u3001\u8abf\u67fb\u5bfe\u8c61\u306e\u30e6\u30fc\u30b6\u30fc\u306b Microsoft Entra \u3067\u4fb5\u5bb3\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc \u30a2\u30e9\u30fc\u30c8\u304c\u3042\u308b\u304b\u3069\u3046\u304b\u3092\u7279\u5b9a\u3067\u304d\u307e\u3059\u3002\u65b0\u3057\u3044\u53ef\u8996\u6027\u306b\u3088\u308a\u3001\u30a2\u30ca\u30ea\u30b9\u30c8\u306f\u3001\u30a4\u30f3\u30b7\u30c7\u30f3\u30c8\u3092SOC\u30c1\u30fc\u30e0\u306b\u30a8\u30b9\u30ab\u30ec\u30fc\u30b7\u30e7\u30f3\u3057\u3066\u8fc5\u901f\u306a\u4fee\u5fa9\u3092\u884c\u3046\u306a\u3069\u3001\u9069\u5207\u306a\u5bfe\u5fdc\u30a2\u30af\u30b7\u30e7\u30f3\u3092\u7b56\u5b9a\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u306f\u3001Microsoft 365 \u30ed\u30fc\u30c9\u30de\u30c3\u30d7 <a href=\"https:\/\/www.microsoft.com\/microsoft-365\/roadmap?filters=&amp;searchterms=420938\" target=\"_blank\">  ID 420938\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u3066\u3044\u307e\u3059<\/a>\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>\u4e00\u822c\u63d0\u4f9b (\u5168\u4e16\u754c\u3001GCC\u3001GCC High\u3001DoD): 2025 \u5e74 4 \u6708\u4e0a\u65ec (\u4ee5\u524d\u306f 3 \u6708\u4e2d\u65ec) \u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3092\u958b\u59cb\u3057\u30012025 \u5e74 4 \u6708\u4e0b\u65ec (\u4ee5\u524d\u306f 3 \u6708\u4e0b\u65ec) \u307e\u3067\u306b\u5b8c\u4e86\u3059\u308b\u4e88\u5b9a\u3067\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u3069\u306e\u3088\u3046\u306b\u5f71\u97ff\u3057\u307e\u3059\u304b:]<\/p>\n<p>Microsoft Entra \u306b\u306f\u3001\u6b21\u306e 2 \u7a2e\u985e\u306e\u4fb5\u5bb3\u3055\u308c\u305f\u30e6\u30fc\u30b6\u30fc\u306e\u691c\u51fa\u304c\u7528\u610f\u3055\u308c\u3066\u3044\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u30b5\u30a4\u30f3\u30a4\u30f3 \u30ea\u30b9\u30af\u691c\u51fa: \u7279\u5b9a\u306e\u30b5\u30a4\u30f3\u30a4\u30f3\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u3066\u3044\u308b\u4fb5\u5bb3\u30ea\u30b9\u30af<\/li>\n<li>\u30e6\u30fc\u30b6\u30fc\u30ea\u30b9\u30af\u691c\u51fa:\u7279\u5b9a\u306e\u30e6\u30fc\u30b6\u30fc\u306b\u95a2\u9023\u4ed8\u3051\u3089\u308c\u305f\u4fb5\u5bb3\u30ea\u30b9\u30af<\/li>\n<\/ul>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u5f8c:<\/p>\n<ul>\n<li>\u30ea\u30b9\u30af\u691c\u51fa\u306f\u3001\u30a2\u30e9\u30fc\u30c8\u8abf\u67fb\u30a8\u30af\u30b9\u30da\u30ea\u30a8\u30f3\u30b9\u306e\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc \u30bf\u30a4\u30e0\u30e9\u30a4\u30f3\u3067\u4f7f\u7528\u3067\u304d\u307e\u3059\u3002<\/li>\n<li>\u30ea\u30b9\u30af\u691c\u51fa\u306f\u3001Insider Risk Management \u30a2\u30e9\u30fc\u30c8\u306e\u30ea\u30b9\u30af \u30b9\u30b3\u30a2\u3084\u91cd\u5927\u5ea6\u306b\u5f71\u97ff\u3092\u4e0e\u3048\u307e\u305b\u3093\u3002<\/li>\n<\/ul>\n<p>\u65b0\u3057\u3044\u30ea\u30b9\u30af\u691c\u51fa\u306b\u30a2\u30af\u30bb\u30b9\u3059\u308b\u306b\u306f\u3001Microsoft Purview \u30dd\u30fc\u30bf\u30eb\u306e &gt; <i>[\u8a2d\u5b9a] &gt; [Insider Risk Management] &gt; [\u30dd\u30ea\u30b7\u30fc \u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc] &gt; [\u7d44\u307f\u8fbc\u307f\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc<\/i> ] \u306b\u79fb\u52d5\u3057\u307e\u3059\u3002  <i>[Microsoft Entra ID \u4fdd\u8b77\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc]<\/i> \u307e\u3067\u4e0b\u306b\u30b9\u30af\u30ed\u30fc\u30eb\u3057\u3001\u30c9\u30ed\u30c3\u30d7\u30c0\u30a6\u30f3 \u30e1\u30cb\u30e5\u30fc\u3092\u958b\u3044\u3066\u3001\u8a72\u5f53\u3059\u308b\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u3092\u9078\u629e\u3057\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/ccp\/en-us\/20b449d4-58a8-43bf-9fde-1f14d646f87d\">  <\/p>\n<p>\u30dd\u30ea\u30b7\u30fc\u3092\u4f5c\u6210\u3059\u308b\u3068\u3001 [ <i>\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc<\/i> ] \u30da\u30fc\u30b8\u306b Microsoft Entra ID \u4fdd\u8b77\u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u304c\u8868\u793a\u3055\u308c\u307e\u3059\u3002<\/p>\n<p><img decoding=\"async\" style=\"width: 400px;\" alt=\"admin controls\" src=\"https:\/\/cxcs.microsoft.net\/file\/ccp\/en-us\/e28ba3e8-f97c-4a13-968e-4f49196be3b5\">  <\/p>\n<p>\u3053\u306e\u5909\u66f4\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u4f7f\u7528\u53ef\u80fd\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n<p>\u3010\u6e96\u5099\u306b\u5fc5\u8981\u306a\u3053\u3068\u3011<\/p>\n<p>\u3053\u306e\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u306f\u3001\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u524d\u306b\u7ba1\u7406\u8005\u306e\u64cd\u4f5c\u3092\u5fc5\u8981\u3068\u305b\u305a\u306b\u3001\u6307\u5b9a\u3055\u308c\u305f\u65e5\u4ed8\u307e\u3067\u306b\u81ea\u52d5\u7684\u306b\u884c\u308f\u308c\u307e\u3059\u3002\u73fe\u5728\u306e\u69cb\u6210\u3092\u78ba\u8a8d\u3057\u3066\u3001\u7d44\u7e54\u3078\u306e\u5f71\u97ff\u3092\u5224\u65ad\u3057\u307e\u3059\u3002\u3053\u306e\u5909\u66f4\u306b\u3064\u3044\u3066\u30e6\u30fc\u30b6\u30fc\u306b\u901a\u77e5\u3057\u3001\u95a2\u9023\u3059\u308b\u30c9\u30ad\u30e5\u30e1\u30f3\u30c8\u3092\u66f4\u65b0\u3059\u308b\u3053\u3068\u3092\u304a\u3059\u3059\u3081\u3057\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u7ba1\u7406\u306e\u7ba1\u7406\u8005\u306f\u3001\u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u7ba1\u7406\u306e\u30b0\u30ed\u30fc\u30d0\u30eb\u8a2d\u5b9a\u304b\u3089\u30ea\u30b9\u30af\u691c\u51fa\u3092\u30aa\u30d7\u30c8\u30a4\u30f3\u3067\u304d\u307e\u3059\u3002<\/li>\n<li>\u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u7ba1\u7406\u7ba1\u7406\u8005\u306f\u3001\u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u7ba1\u7406\u30dd\u30ea\u30b7\u30fc\u3067\u30ea\u30b9\u30af\u691c\u51fa\u3092\u30aa\u30d7\u30c8\u30a4\u30f3\u3059\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/li>\n<\/ul>\n<p>Microsoft Purview \u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u7ba1\u7406\u306f\u3001\u3055\u307e\u3056\u307e\u306a\u30b7\u30b0\u30ca\u30eb\u3092\u95a2\u9023\u4ed8\u3051\u3066\u3001IP \u306e\u76d7\u96e3\u3001\u30c7\u30fc\u30bf\u6f0f\u3048\u3044\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u9055\u53cd\u306a\u3069\u3001\u60aa\u610f\u306e\u3042\u308b\u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u3084\u4e0d\u6ce8\u610f\u306b\u3088\u308b\u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u3092\u7279\u5b9a\u3057\u307e\u3059\u3002\u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u7ba1\u7406\u3092\u4f7f\u7528\u3059\u308b\u3068\u3001\u304a\u5ba2\u69d8\u306f\u72ec\u81ea\u306e\u5185\u90e8\u30dd\u30ea\u30b7\u30fc\u3001\u30ac\u30d0\u30ca\u30f3\u30b9\u3001\u304a\u3088\u3073\u7d44\u7e54\u306e\u8981\u4ef6\u306b\u57fa\u3065\u3044\u3066\u30dd\u30ea\u30b7\u30fc\u3092\u4f5c\u6210\u3067\u304d\u307e\u3059\u3002\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u30fb\u30d0\u30a4\u30fb\u30c7\u30b6\u30a4\u30f3\u3067\u69cb\u7bc9\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3001\u30e6\u30fc\u30b6\u30fc\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u4eee\u540d\u5316\u3055\u308c\u3001\u30ed\u30fc\u30eb\u30d9\u30fc\u30b9\u306e\u30a2\u30af\u30bb\u30b9\u5236\u5fa1\u3068\u76e3\u67fb\u30ed\u30b0\u304c\u5c0e\u5165\u3055\u308c\u3066\u3001\u30e6\u30fc\u30b6\u30fc\u30ec\u30d9\u30eb\u306e\u30d7\u30e9\u30a4\u30d0\u30b7\u30fc\u304c\u78ba\u4fdd\u3055\u308c\u307e\u3059\u3002<\/p>\n<p><i>\u8a73\u7d30\u60c5\u5831 <\/i>  <\/p>\n<ul>\n<li><a href=\"https:\/\/learn.microsoft.com\/entra\/id-protection\/concept-identity-protection-risks\" target=\"_blank\">Microsoft Entra ID \u4fdd\u8b77\u306e\u30ea\u30b9\u30af\u3068\u306f &#8211; Microsoft Entra ID \u4fdd\u8b77 |\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8 \u30e9\u30fc\u30f3<\/a><\/li>\n<li><a href=\"https:\/\/learn.microsoft.com\/purview\/insider-risk-management-settings-policy-indicators?tabs=purview-portal\" target=\"_blank\">\u30a4\u30f3\u30b5\u30a4\u30c0\u30fc \u30ea\u30b9\u30af\u7ba1\u7406\u3067\u30dd\u30ea\u30b7\u30fc \u30a4\u30f3\u30b8\u30b1\u30fc\u30bf\u30fc\u3092\u69cb\u6210\u3059\u308b |\u30de\u30a4\u30af\u30ed\u30bd\u30d5\u30c8 \u30e9\u30fc\u30f3<\/a><\/li>\n<\/ul>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC1006621 | (Updated) Microsoft Purview | Insider Risk Management: New compromised user context in Microsoft E [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-10635","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/10635","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=10635"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/10635\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=10635"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=10635"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=10635"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}