Alarm for downloading large amounts of data?

[jonasloesle]

Hi guys

Is it possible to create an alarm in the sharepoint administration area when a person downloads large amounts of data from SharePoint? We try to reduce the risk of employees stealing data. Any ideas or tips on this?

Thanks a lot

[#2]

I would look at Defender for Cloud Apps or the complete suite Insider Risk Management.

https://docs.microsoft.com/en-us/microsoft-365/compliance/insider-risk-management-solution-overview?...

[#3]

You can also get alerted directly through generating alerts in the Microsoft Purview Center. Those alerts make use of the Audit Log Search feature

[#4]

Also assess the risk of the OneDrive for Business client. It can be used to sync up to 300000 items on local clients. The 300000 items can be retrieved over time and may be less than the alarm thresholds.

[#5]

@Juan Carlos González Martín How do we make use of Audit Log Search feature. Can you provide more details please.