Forensic File Storage for DLP Violation

[scoleman]

Question: Does Netskope store the entire file in forensics when we receive a DLP violation?

[rreed · Accepted solution]

We store, in configured third party storage, the filtered (extracted text) but not the original file.

You can only ‘pull file’ if it is from a SaaS API protection app that is connected.