Desktop.ini show up in CD DVD incidents

Products

• Data Loss Prevention Core Package

Issue/Introduction

Incidents show up in the console for Desktop.ini on the CD / DVD channel when that file was not transferred to the CD / DVD

Environment

Release : 16.0

Cause

The desktop.ini is used by windows to stage burning files to the CD / DVD drive. If DLP is only monitoring the channel with no rules to scan for PII then the desktop.ini will trigger an incident. This is working as designed.

Resolution

To prevent this issue from occurring add *desktop.ini to an ignore filter in the agent configuration for the CD / DVD channel.