This repository documents a Microsoft Purview Insider Risk Management configuration performed in a non-production sandbox tenant (securem365lsb.onmicrosoft.com) using a clearly labeled test account (Test User 1, admin365 lab). No production tenant data, real employee data, customer data, or production credentials are included anywhere in this repository.

• Pseudonymized username examples shown in screenshots (for example, AnonyIS8-988) are illustrative UI examples, not real production identities.
• No passwords, connection strings, API keys, certificates, or tokens are included in any script or screenshot in this repository.
• All PowerShell scripts in scripts/ require interactive, MFA-capable sign-in via Connect-IPPSSession — no credentials are hardcoded or stored in this repository.

If you believe you have found a security issue related to this repository (for example, an accidentally committed secret, or a script that could be misused), please:

1. Do not open a public GitHub issue describing the vulnerability in detail.
2. Contact the repository owner directly at lokeshkarnam007@gmail.com with a description of the issue.
3. Allow reasonable time for the issue to be reviewed and addressed before any public disclosure.

This repository is documentation and reusable PowerShell tooling for a compliance/insider-risk governance control. It is not a security scanning tool, does not process live production data, and should not be treated as a certified or audited security product. Organizations implementing Insider Risk Management based on this repository should validate the configuration against their own compliance, legal, HR, and security requirements before production rollout — particularly given the privacy implications of monitoring individual user activity.