Securlet generating DLP incidents on old files that have not been updated

Products

• CASB Securlet SAAS
• CASB Security Advanced
• CASB Security Standard
• CASB Security Premium

Issue/Introduction

You notice that the Office 365 securlet started inspecting old files that were not modified in several years.

Cause

When the folder that contains the file is shared with a new recipient, the Office 365 Securlet will automatically rescan all the files in it. 

Resolution

If you check the User Activity Type in the incident, you can it share, indicating the file is rescanned due to share activity.