Corelation with data, sender, recipient pattern
yes there is feature availbale in symantec DLP as corelation. This can corelate to reapective attributes of other incidents. But still i think taht there is need of a duffrent corelation feature which can corelates with the kind of data(contains) i.e rows,coloumns matches with rules and it should be integrated with sender and recipient.This will reduce false positive incident and decrease the security risk.Based on specific defined sender-recipient-contains pattern can be traced and also increase the efficiancy of DLP.
Thanks & Regards