Classifications on files appearing in the incident list
We currently have a DLP policy to log all (any) data transferred off to removable media which is working as intended.
However, we would like any files that have classifications attached to them (manually classified) to be included in the incident under the classification tab.
Would i need to create a separate rule specifying which classifications to log to have them appear in the incident list (classification tab) or is there a way to bring them up in our current rule specifying all data?
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.
Community Help Hub
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.