Opening case…
Loading your run…
CASB flags employees pasting internal docs into an unapproved AI writing SaaS.
CASB detected uploads from ~30 employees to an AI document-summarizer SaaS not on the approved list. Some uploads match internal document classifications, including a few tagged "Confidential". The vendor's terms allow training on submitted data.
index=casb app="ai-summarizer.example" action=upload | lookup dlp_class filename | where classification IN ("Internal","Confidential") | stats count by user, classificationdetection queryindex=casb app="ai-summarizer.example" action=upload | lookup dlp_class filename | where classification IN ("Internal","Confidential") | stats count by user, classification