Unable to detect Encrypted 7ZIP file

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Cloud Package
• Data Loss Prevention
• Data Loss Prevention
• Data Loss Prevention Cloud Detection Service
• Data Loss Prevention Cloud Detection Service for ICAP
• Data Loss Prevention Cloud Detection Service for REST
• Data Loss Prevention Cloud Prevent for Microsoft Office 365
• Data Loss Prevention Cloud Service for Email
• Data Loss Prevention Cloud Storage
• Data Loss Prevention Core Package
• Data Loss Prevention Endpoint Discover
• Data Loss Prevention Enforce
• Data Loss Prevention for Office 365 Email and Gmail with Email Safeguard
• Data Loss Prevention Form Recognition
• Data Loss Prevention Network Discover
• Data Loss Prevention Network Email
• Data Loss Prevention Network Monitor and Prevent for Email and Web
• Data Loss Prevention Network Monitor and Prevent for Email
• Data Loss Prevention Network Monitor and Prevent for Web
• Data Loss Prevention Network Prevent for Email

Issue/Introduction

You create a policy to detect  "Encryption Formats" on Password-Protect 7 zip but it is not detecting/creating an incident based on the rule you created

 

 

Environment

Release : 16.0

Services: Email Prevent, Endpoint Prevent, CDS For Email . 

Application: 7 ZIP

 

Cause

Adding a password will only encrypt the file within the ZIP file - this is not consider an encrypted 7ZIP file 

 

 

Resolution

When adding a file to the archive ensure you select "Encrypt File Names".