IP Address v6
Catalogue reference for the Microsoft Purview built-in IP Address v6 sensitive information type, which detects an IPv6 address in full or compressed form, with IP-address keywords raising confidence. Microsoft recommends medium confidence (75) for the built-in entity. This YAML-only record lets a package recipe include the Microsoft entity explicitly; it does not reproduce Microsoft's built-in regular expressions, keyword dictionaries, checksums or XML.
- Type
- keyword_list
- Confidence
- medium
- Confidence justification
- Medium confidence for this YAML-only record: its keyword logic finds references to the built-in entity name with Microsoft Purview context, not populated values. Microsoft's own recommended confidence for the entity is 75. The record does not claim to reproduce Microsoft's proprietary detection logic.
- Jurisdictions
- global
- Regulations
- GDPR
- Frameworks
- CIS Controls, ISO 27001, NIST CSF, SOC 2
- Data categories
- network, pii
- Scope
- specific
- Risk rating
- 4
Should match
IP Address v6 built-in SIT— Microsoft built-in entity nameIPv6 Address catalogue reference— Name variant used for registry discoveryDLP policy inventory - Microsoft Purview Rule: Builtin-global-ip-address-v6 Condition: IP Address v6 (built-in entity 3f691089-7413-4926-ab3b-3c5ea8a1c17e), medium confidence, instance count 1 or more Action: notify sender— DLP rule inventory row naming the built-in entity with Microsoft Purview context
Should not match
Host at 2001:db8::1— Populated value or sibling reference without the built-in entity nameNetwork diagram legend— Populated value or sibling reference without the built-in entity nameRouter configuration guidance— Populated value or sibling reference without the built-in entity name
Known false positives
- Documentation and policy inventories can mention the Microsoft built-in entity by name. Mitigation: Treat this YAML-only record as catalogue discovery; enable the Microsoft entity for value detection.
- The custom SIT global-ipv6-address detects the same data; deploying both doubles matches on the same content. Mitigation: Pick one per package. The custom SIT is the default; include this built-in only by an explicit recipe decision.