I have a configured File Filter, logs go to Forti Analyzer. For example,
I have a monitor for PDF files, I see which documents are sent and
received by users according to my rule. But in the case when an incident
occurs (conditional data leak) how wo...