MENU
You want to see the actual data that caused the policy violation within a DLP Incident view.
In this scenario, which profile must be set up?
DLP Incident View:
To see the actual data that caused a policy violation within a DLP incident, detailed logging and data capture are required.
Forensics Profile:
A Forensics Profile in Netskope is designed to capture and store detailed information about policy violations, including the actual data that triggered the incident.
It provides a comprehensive view of the incident for investigation and compliance purposes.
Setup Process:
Navigate to the DLP settings in the Netskope admin console.
Configure a Forensics Profile to capture detailed logs and data for policy violations.
Ensure that this profile is associated with the relevant DLP policies.
Reference:
For detailed configuration steps, refer to the Netskope documentation on setting up Forensics Profiles for DLP incidents.