Symantec DLP Use Case - Monitor File Copying From Share Folder

Symantec DLP solution does not support to create a policy to detect access based on folder or location. The use case I am having is to monitor users who has copied large amount of data from share folders. In this video, I found a way to create a policy then generate a user list including those who have copied files from share folder. It might not a perfect solution, but it works for my lab environment. ==================================================================== If you found this video has some useful information, please give me a thumb up and subscribe this channel to get more updates: https://www.youtube.com/c/Netsec?sub_confirmation=1 Learning and Sharing Cyber Security and IT Knowledge - 海内存知己，天涯若比邻 (http://51sec.org)