Abstract: Systems and methods that enable implementation of content aware file management labeling. Techniques disclosed enable real-time analysis of a data file so that associations between the data file and applicable file management label(s) can be automatically suggested and/or made while a user is working in the data file. A user may deploy an application on a client device to edit a data file. While the user is actively editing the data file, the application may transmit modification data to a content analysis service which analyzes the modification data to determine whether the modifications result in a file management label becoming applicable to the data file. Ultimately, the content analysis service may transmit a verdict to the client device to cause the application to display a labeling suggestion to the user and/or to automatically apply a label to the data file while it is being worked on by the user.

Abstract: An enhanced email service that mitigates drawbacks of conventional email services by enabling transmission of encrypted content to a recipient regardless of the recipient having a prior relationship with the sender or having credentials issued from a certificate authority. A method is provided for receiving encrypted content and generating a message includes both the encrypted content as an attachment and a link to enable access to the encrypted content. The method may include transmitting the message to an intended recipient's mailbox while also storing the message in another mailbox to provide for subsequent decryption of the encrypted content. The link may provide the intended recipient of the message with access to the encrypted content in various ways depending on, for example, whether the recipient is viewing the message through a webmail browser or through a local mail client that is compatible with the enhanced email service.

Abstract: An enhanced email service that mitigates drawbacks of conventional email services by enabling transmission of encrypted content to a recipient regardless of the recipient having a prior relationship with the sender or having credentials issued from a certificate authority. A method is provided for receiving encrypted content and generating a message includes both the encrypted content as an attachment and a link to enable access to the encrypted content. The method may include transmitting the message to an intended recipient's mailbox while also storing the message in another mailbox to provide for subsequent decryption of the encrypted content. The link may provide the intended recipient of the message with access to the encrypted content in various ways depending on, for example, whether the recipient is viewing the message through a webmail browser or through a local mail client that is compatible with the enhanced email service.

Abstract: An enhanced email service that mitigates drawbacks of conventional email services by enabling transmission of encrypted content to a recipient regardless of the recipient having a prior relationship with the sender or having credentials issued from a certificate authority. A method is provided for receiving encrypted content and generating a message includes both the encrypted content as an attachment and a link to enable decrypted access to the decrypted content. The method may include transmitting the message to an intended recipient's mailbox while also storing the message in an organizational mailbox to provide for subsequent decryption of the encrypted content. The link may provide the intended recipient of the message with decrypted access to the encrypted content in various ways depending on, for example, whether the recipient is viewing the message through a webmail browser or through a local mail client that is compatible with the enhanced email service.

Abstract: The techniques described herein enable a user that sends an email message that includes encrypted content to define a time period during which a recipient of the encrypted content has decrypted access rights. To effectively define the time period, the user can set a time at which the decrypted access rights for the recipient expire. The time occurs after a time at which the email message is sent to the recipient. Upon expiration of the time period, the decrypted access rights to the encrypted content is revoked for the recipient of the email message, thereby providing a proactive element of security for confidential and/or sensitive information. Further, the techniques enable a user to revoke decrypted access rights to the encrypted content for a recipients at any given time after the email message has already been sent, thereby adding a reactive element of security for confidential and/or sensitive information.

Abstract: Systems and methods that enable implementation of content aware file management labeling. Techniques disclosed enable real-time analysis of a data file so that associations between the data file and applicable file management label(s) can be automatically suggested and/or made while a user is working in the data file. A user may deploy an application on a client device to edit a data file. While the user is actively editing the data file, the application may transmit modification data to a content analysis service which analyzes the modification data to determine whether the modifications result in a file management label becoming applicable to the data file. Ultimately, the content analysis service may transmit a verdict to the client device to cause the application to display a labeling suggestion to the user and/or to automatically apply a label to the data file while it is being worked on by the user.

Abstract: Technologies are described for dynamic attachment delivery in emails for advanced malicious content filtering. An email service may intercept emails with attachments (or other threats such as links, embedded objects, etc.) and detach the threat (e.g., attachment) from the email allowing the email to be forwarded to the recipient without delay. The threat may be sequestered and analyzed. If the threat is determined to be harmless, it may be reattached to the email and the client notified so they can open the attachment, activate the link, or perform comparable actions.

Abstract: An electronic mail (email) message is received at in email transport infrastructure and has a traffic type identifier identifying a traffic type. Function processing logic in the email transport infrastructure conditionally processes the email message based on the traffic type.

Abstract: Systems and methods that enable implementation of content aware file management labeling. Techniques disclosed enable real-time analysis of a data file so that associations between the data file and applicable file management label(s) can be automatically suggested and/or made while a user is working in the data file. A user may deploy an application on a client device to edit a data file. While the user is actively editing the data file, the application may transmit modification data to a content analysis service which analyzes the modification data to determine whether the modifications result in a file management label becoming applicable to the data file. Ultimately, the content analysis service may transmit a verdict to the client device to cause the application to display a labeling suggestion to the user and/or to automatically apply a label to the data file while it is being worked on by the user.

Abstract: Techniques for labeling data files that enable a file management label to persist on a data file. Variations disclosed herein enable a file management label to be embedded within a data file so that the file management label propagates with the data file when the data file is copied and/or moved between systems and/or workloads. In some embodiments, an application may be configured to write the file management label directly into a stream of the data file. For example, an application client that is run locally on a client device may open the data file by accessing its corresponding stream. While the data file is open within the application client such that a user may edit content of the data file, the application client may be caused to associate the file management label with the data file. Ultimately, the application client may write this association directly into the stream.

Abstract: Threat intelligence management is provided in a security and compliance environment. A threat explorer platform or module of a security and compliance service may detect, investigate, manage, and provide actionable insights for threats at an organizational level. Working with a data insights platform that collects different types of signals (metadata, documents, activities, etc.) and correlates in a multi-stage evaluation, the threat intelligence module may provide actionable visual information on potential threats, affected areas, and actionable insights derived from internal threat data and external information using contextual correlation of data within the data insight platform. User experience may be dynamically adjusted at multiple levels based on context and allow users to drill down arbitrarily deep.

Abstract: Technologies are described herein for providing instant processing of email messages. In particular, instant processing of email messages is provided for sending emails to allow for instant communication and collaboration. According to one aspect presented herein, a method is provided for instant or near instant delivery of a message across multiple organizations. The method includes receiving the message from a client. Additionally, the method sends the message via email to multiple recipients across multiple organizations.

Abstract: The techniques described herein enable a user that sends an email message that includes encrypted content to define a time period during which a recipient of the encrypted content has decrypted access rights. To effectively define the time period, the user can set a time at which the decrypted access rights for the recipient expire. The time occurs after a time at which the email message is sent to the recipient. Upon expiration of the time period, the decrypted access rights to the encrypted content is revoked for the recipient of the email message, thereby providing a proactive element of security for confidential and/or sensitive information. Further, the techniques enable a user to revoke decrypted access rights to the encrypted content for a recipients at any given time after the email message has already been sent, thereby adding a reactive element of security for confidential and/or sensitive information.

Abstract: An enhanced email service that mitigates drawbacks of conventional email services by enabling transmission of encrypted content to a recipient regardless of the recipient having a prior relationship with the sender or having credentials issued from a certificate authority. A method is provided for receiving encrypted content and generating a message includes both the encrypted content as an attachment and a link to enable decrypted access to the decrypted content. The method may include transmitting the message to an intended recipient's mailbox while also storing the message in an organizational mailbox to provide for subsequent decryption of the encrypted content. The link may provide the intended recipient of the message with decrypted access to the encrypted content in various ways depending on, for example, whether the recipient is viewing the message through a webmail browser or through a local mail client that is compatible with the enhanced email service.

Abstract: Technologies are described herein for altering message properties within a message to indicate acknowledgement. In particular, types of acknowledgment may include delivery receipts, read receipts and non-read receipts. According to one aspect presented herein, a method is provided for acknowledging a message. The method includes receiving a message from a client and attempting to send the message to a recipient mailbox. Additionally, the method alters properties of the message in response to attempting to send the message.

Abstract: An enhanced email service that mitigates drawbacks of conventional email services by enabling transmission of encrypted content to a recipient regardless of the recipient having a prior relationship with the sender or having credentials issued from a certificate authority. A method is provided for receiving encrypted content and generating a message includes both the encrypted content as an attachment and a link to enable decrypted access to the decrypted content. The method may include transmitting the message to an intended recipient's mailbox while also storing the message in an organizational mailbox to provide for subsequent decryption of the encrypted content. The link may provide the intended recipient of the message with decrypted access to the encrypted content in various ways depending on, for example, whether the recipient is viewing the message through a webmail browser or through a local mail client that is compatible with the enhanced email service.

Abstract: Systems and methods that enable implementation of content aware file management labeling. Techniques disclosed enable real-time analysis of a data file so that associations between the data file and applicable file management label(s) can be automatically suggested and/or made while a user is working in the data file. A user may deploy an application on a client device to edit a data file. While the user is actively editing the data file, the application may transmit modification data to a content analysis service which analyzes the modification data to determine whether the modifications result in a file management label becoming applicable to the data file. Ultimately, the content analysis service may transmit a verdict to the client device to cause the application to display a labeling suggestion to the user and/or to automatically apply a label to the data file while it is being worked on by the user.

Abstract: Techniques for labeling data files that enable a file management label to persist on a data file. Variations disclosed herein enable a file management label to be embedded within a data file so that the file management label propagates with the data file when the data file is copied and/or moved between systems and/or workloads. In some embodiments, an application may be configured to write the file management label directly into a stream of the data file. For example, an application client that is run locally on a client device may open the data file by accessing its corresponding stream. While the data file is open within the application client such that a user may edit content of the data file, the application client may be caused to associate the file management label with the data file. Ultimately, the application client may write this association directly into the stream.

Abstract: Technologies are described herein for providing delivery optimization of email messages. In particular, direct delivery system is provided for sending emails to allow for instant communication and collaboration. According to one aspect presented herein, a method is provided for instant or near instant delivery of a message. The method includes receiving the message from a client. Additionally, the method analyzes the message to determine if it meets one or more factors for taking a direct path.

Abstract: Correlated signals associated with one or more of stored content, content metadata, and activities associated with the stored content of a tenant may be analyzed and alert(s) determined based on alert threshold(s) or broader “abnormal” pattern detection. Different recipients for different alerts or alert levels may be designated and the alert(s) transmitted to the designated recipients. Alerts may also be displayed through an alert management dashboard of a protection service. The alert(s) and the results of the analysis may also be provided to a policy engine for use in adjusting or creating rules within a policy, alert thresholds, and signal collection/analysis. Post-fact investigations may also be initiated upon alerts.