Hello,
Can I configuring DLP 11.1 to create shadow copies of files that are copied to USB disk without block copying? Can I configuring DLP 11.1 to see full content of files in the incindent from DLP Endpoint?
Thank you.
Yes.
Just create a response rule: 'All: Limit Incident Data Retention'
This response rule will copy the original file to the Enforce Server.
Thank you very much!