Netskope DLP violation on sensitive data shared via Slack/Teams

KQL Cowboy@KQLCowboy

•updated Aug 18, 2026•2•0•5

Detects DLP policy violations flagged by Netskope when users upload, share, post, or send files within Slack or Microsoft Teams. This rule monitors for DLP profile matches which may indicate unauthorized exfiltration or exposure of sensitive data via collaboration tools.