Remediation scans use rules to detect and act on sensitive files.
Files crawled by a remediation scan are compared against active discovery rules. If the file matches the repository and classifications defined in a rule, Trellix DLP Discover – SaaS applies the Action specified in the rule.
Actions available for remediation scans
Action | File System | |
|---|---|---|
Take no action | X | |
Create an incident | X | |
Store the original file as evidence | X | |
Copy the file | X ¹ | |
Move the file | X ¹ | |
Classify File As | X | |
Remove automatic classification | X |
¹ Copying and moving files supported only to SMB/CIFS shares.