Endpoint DLP

Cortex XSIAM Endpoint DLP helps prevent sensitive data exfiltration from managed endpoints.

It classifies content and validates true file types. Data-in-motion rules enforce protection across supported endpoint applications.

Use these topics to plan, configure, monitor, and investigate Endpoint DLP:

* [cortex-data-loss-prevention-dlp-module-overview](endpoint-dlp/cortex-data-loss-prevention-dlp-module-overview "mention")
* [personas-workflow-for-dlp](endpoint-dlp/personas-workflow-for-dlp "mention")
* [best-practices](endpoint-dlp/best-practices "mention")
* [configure-dlp-end-to-end](endpoint-dlp/configure-dlp-end-to-end "mention")
* [dlp-status-in-all-endpoints](endpoint-dlp/dlp-status-in-all-endpoints "mention")
* [cortex-dlp-threat-detection-and-issues](endpoint-dlp/cortex-dlp-threat-detection-and-issues "mention")

Sub-topics

• Cortex Data Loss Prevention (DLP) module overview
  • Archive file classification
  • True-file type detection
• Personas workflow for DLP
• Best Practices
• Configure DLP end-to-end
• DLP status in all endpoints
• Cortex DLP threat detection and issues