SharePoint Online Sensitive Data Search

Collin Lairamore@Bollinmore

•updated May 5, 2026•9•0•405

This rule detects when users perform search queries in SharePoint Online that contain keywords indicative of sensitive data. The rule categorizes these searches into several types: credentials, personnel/HR information, infrastructure reconnaissance, financial/PII, and confidential business information.