A custom kind of sensitive information type that looks up the real values held in a table your organisation supplies, such as a customer list, rather than matching a generic pattern. Data loss prevention can then flag only those precise records.
Also called EDM.
Read more: Microsoft Learn
In the Ultra Transcenders books
Each book explains Exact data match in context, with comparison tables and the common traps.
Terms in this definition
- Sensitive information type
Classifier based on patterns, such as credit card numbers, that policies and labels rely on to spot sensitive content. You can also define custom ones.
- VALUES
Returns in DAX the distinct column values, or table rows, still visible after filters are applied, sometimes with an extra blank entry. CALCULATE often takes the result as a table filter.
- Event
Table in Log Analytics where entries from Windows event logs are kept.
- List
Permission on Key Vault secrets allowing a caller to enumerate those in a vault, though their values are not returned.
- Pattern
A reusable answer to a recurring problem that places building blocks in context, explaining when, how and why to apply them and what compromises are involved.
Related terms
- Advanced classification scanning and protection
An Endpoint DLP option in which content from devices is classified by a cloud service, letting device policies use trainable classifiers, exact data match, named entities and credential classifiers. Admins can cap the bandwidth it uses.
- Data classification
Covers the methods Purview uses to recognise sensitive content, from pattern-based types and exact data match to machine-learning classifiers, fingerprinting and OCR. Labelling, DLP and retention all rely on what it detects.
- EDM Upload Agent
Salts and hashes the source table for exact data match and sends only the hashes to Microsoft; best practice is to hash on one secure machine and upload from another. Whoever signs in has to be a member of EDM_DataUploaders.
- EDM_DataUploaders
Only accounts in this security group can upload exact data match hashes with the EDM Upload Agent.
- Primary element
Every sensitive information type pattern is built around one core item to detect. That item can be a regex (validator optional), keyword list or dictionary, or a function; for exact data match, it is the searchable column picked up by an existing SIT.
- Sensitive information source table
Real values that exact data match compares content against. Before upload this data is hashed; it is exported to CSV, TSV or pipe-delimited text whose columns follow the schema.
- Single-computer method
A way of uploading EDM data where hashing and uploading happen together, which means the unhashed source table has to be stored on a computer that connects to the tenant.
- Supporting element
Additional evidence, like a keyword or a second EDM column, found close to the main thing a sensitive information type detects; it boosts confidence in the match.