We have several false positive events regarding OneDrive.

Products

• Data Loss Prevention Enterprise Suite

Issue/Introduction

We made the exception for the directories below:

 

%HOMEPATH%\Company Name\*

%HOMEPATH%\OneDrive\*

%HOMEPATH%\OneDrive\Company Name\*

 

and we also try this way:

 

%userprofile%\Company Name\*

%userprofile%\OneDrive\*

%userprofile%\OneDrive\Company Name\*

 

 

Settings have been made in Agent Configuration, including exception (ignore) in Cloud Storage

Environment

Release :

Component :

Resolution

Check for %onedrive% (for personal accounts) and %onedrivecommercial% (commercial/Enterprise accounts) in your environment variables. 

If these variables are present, add them to the Agent Config > File Filter properties.

Additional Information

See also: Article ID: 198249 Best practices for DLP endpoint monitoring of Microsoft Office cloud storage locations