As part of our DLP environment, I am looking to see find when anyone saved an attachment in Outlook within Office365. We are only interested in saving of attachments via OWA or on a registered mobile device. The current DLP rules only monitor emails generated, but I was hoping to include the latter scenario.
Since Office365 can be accessed inhouse, via OWA, or a mobile client, we are looking for ways to monitor the saving of attachments to non-company owned devices. Staff working from home, that connect to Office365 via OWA from their personal device, can save confidential data that was sent to their company email address. This then becomes a data loss scenario. I do not see this as an available condition to monitor in the DLP rules.
Anyone have any suggestions?
thank you
