Navigate to Incident Manager → Data in Use/Motion to identify and investigate reported incidents.
The Incident Management page provides information on incident types, actions (expected vs. actual), file destinations, and reporting origins. You can filter incidents based on severity, status, resolution, incident type, and classification. For more information on incident management, see Managing Trellix DLP – SaaS incidents in the Protection Workspace.
Detailed information, such as file location, matched strings, and classification criteria, is visible within the Evidence pane. For more information on the evidence, see Evidence Details pane.