Hello again,

We are back with a question from a previous issue mention.

What is an idea? We will have shares with a lot of different file types Office files, zip files, CAD files and so on...

Theese shares will keep only sensitive data. Any data that are copied to this share by moderators and maintainers of that share should be automaticly classified as Sensitive or Restricted regardless of type and content. A DLP solution should be able to auto add a label to newly added files in every scan. This way, files are being manually classified by adding to a share. Also this would enable more possibilities as sensitive files can be different content than just a text or office document format.

Currently, this Data Protection solution works in a way that it scans a content of every file and searches for a match using regex or a keyword. That is a way the most DLP solutions work and we understand an idea behind this approach.

We wonder if we could utilise this solution to do a simmilar manner. There comes two questions:

1. Can we create classification profile policies in a way that Risk Analysis will classify with a label all the files in a share with minimum performanse issues caused by content analysis?

2. If not, does Endpoint DLP have a CLI utility for manual file classification so we can process a share by a batch script?

Thank you.