DLP Incident Manager Displays all incidents reported by Trellix DLP applications. You can alter the way incidents appear to help you locate important violations more efficiently.
The Present field in the DLP Incident Manager displays incidents according to the application that produced them:
Data in-use/motion
Trellix DLP Endpoint
Trellix Device Control
Trellix DLP Network Prevent
Trellix DLP Network Monitor
Data at rest (Endpoint) — Trellix DLP Endpoint discovery
Data at rest (Network) — Trellix DLP Discover
When Trellix DLP processes an object — such as an email message — that triggers multiple rules, DLP Incident Manager collates and displays the violations as one incident, rather than separate incidents.