PURVIEW DLP PILOT KIT

These files are synthetic. No credentials, real financial data or personal data are included.
Nothing in this kit configures Microsoft 365 automatically. policy-blueprint.json is a review worksheet, not an import format.

1. Confirm a dedicated SharePoint lab site and an external identity you control.
2. Follow the companion article to create and test the custom marker SIT.
3. Pre-share 04-change-control.txt while it is clean and verify external access before enforcement. In E04 add one exact marker to that same file; preserve its link and permissions. This is a changed-file test, not a new upload.
4. Record each case in test-matrix.csv and run-sheet.txt.
5. Begin with simulation and automatic activation disabled.
6. Enforce only within the approved lab after reviewing the evidence.
7. Verify recovery with existing links intact, then remove temporary grants and restore the original site sharing setting.

Expected results in the matrix are acceptance criteria. Every case initially has outcome "Not run".
A local marker check verifies fixture construction only; it does not prove Purview classification or access enforcement.

ARTICLE
Microsoft Purview DLP: Test Before Blocking External Sharing
Author: Tiago Carvalho
Review revision 19 October 2026
