Currently When OneDrive/SharePoint Documents are shared externally and trigger an Alert based on DLP policy, we are not able to see who the Document was shored with.
The proper investigation cannot be done without knowing who the document was shared with, did someone share it to their personal email causing data loss to the organization vs someone sharing it with a partner organization which would be considered routine work activity.
No CommentsBe the first to comment