I'm looking at the Incident and Reporting API for DLP 14 guide and in the table for messageTypeinteger values it shows EndpointLocalFileSystemIncidentDetai however this is given for both the Local File System and also Removable Storage.
I'm not sure if that gives you what you want?
Refer to the API guide PDF that comes under the Documentation Zip file