---
title: >-
  TrendAI Vision One Endpoint Security alert: Data loss prevention violation
  detected
description: Datadog, the leading service for cloud-scale monitoring.
breadcrumbs: >-
  Docs > Datadog Security > OOTB Rules > TrendAI Vision One Endpoint Security
  alert: Data loss prevention violation detected
---

> For the complete documentation index, see [llms.txt](https://docs.datadoghq.com/llms.txt).

# TrendAI Vision One Endpoint Security alert: Data loss prevention violation detected

{% alert level="danger" %}
This rule is part of a beta feature. To learn more, [contact Support](https://docs.datadoghq.com/help/).
{% /alert %}
 
## Goal{% #goal %}

Detect data loss prevention (DLP) violations as identified by TrendAI Vision One Endpoint Security.

## Strategy{% #strategy %}

Monitor endpoint security events for indications of data loss prevention (DLP) violations. Focus on analyzing the context of the event, including the specific policy settings that were breached and the affected endpoints. These events may indicate breaches of security policies, such as the inappropriate access to or transmission of sensitive or confidential information, which could pose significant security risks and necessitate immediate attention.

## Triage and Response{% #triage-and-response %}

1. Confirm the policy settings associated with the data loss prevention violation (`{{@policy_settings}}`).
1. Review the event details to understand the nature of the violation.
1. Examine the impacted endpoint using its name (`{{@source_host_name}}`) and IP address (`{{@endpoint_ip}}`).
1. If the data loss prevention violation is confirmed as a security issue, take appropriate actions to address the breach, such as adjusting policies or restricting access.
1. Continue to monitor the affected endpoints for further data loss prevention violations or related anomalies.

## Changelog{% #changelog %}

- 8 July 2026 - Repointed detection from the retired content-violation event type to data-loss-prevention (TrendAI rebrand).