Hi there,
We are receiving logs from a Data Loss Prevention (DLP) system about what users access, etc and we want to analyze it with Enterprise Security. (Semi) Out-of-the-box solutions preferred.
I found a DLP Data model, but couldn't find any dashboard, etc. which uses it for any correlations. Also, ES Content Updates App doesn't provide use cases for DLP Data model.
So does anybody have an experience on this topic, what should I do with this logs?
Regards,
István
