There are some different DLP rules types that allow include or exclude rules by file type in use.
These rules are:
Removable Storage File Access Rules
Removable Storage Protection Rules
You can configure these kind of rules to act on certain kind of file types or/and file extensions.
Does HDLP look into files header to distinguish file types? For example in case file extension is intentionally renamed to pass restrictive rules, can DLP still understand what the original file is?
If HDLP doesn’t check files header, how can we protect some specific type of files (extension renamed or archived files) will not be copied to removable storage? Tagging in early state?