Tracked Files

A tracked file is a file that is received on the endpoint from a supported entry point. Supported entry point are file download, files saved from an incoming email, files copied from Box cloud storage sync folders.

Once the file is received on the endpoint, file activity, such as copy, move, and delete is tracked. The file is tracked until it is exfiltrated from a supported exit point. Supported exit points are exfiltration to USB, exfiltration to a Cloud-Sync folder, file upload and exfiltration as files attached to emails.