Data Loss Prevention

I have policy that is looking for a 100% match for files in an IDM document profile. I’m seeing false positives where users are sending various pptx files that are being flagged as 100% matches of two particular unrelated pptx files in the index. When reviewing the files that were flagged and the files they supposedly matched with, I see no obvious similarities. Has anyone else seen this issue (with power points, or any other files for that matter)?

Actually, we recommend you not to use IDM for PPT files. There are many metadata in PPT files that will reduce the veracity of the IDM.

Is there a possibility for you t generate the IDM's based on a word document perhaps but with the content of the PPT. In that way it may trigger incidents a little bit more accurately. Even if it is scanning PPT files in DAR and/or DIM.