When Microsoft Office files or Adobe Acrobat PDF files are saved as evidence, some of the files might be saved as .txt files in the DLP Endpoint Incident Manager.
Cause
The DLP Endpoint agent evaluates raw text that is sent to the printer. The application add-ins, which are configured in the Miscellaneous tab of the Agent Configuration, save a copy of the original file as evidence. If it can't save the original file, it saves a .txt version as evidence. In all cases, the rule will Block, Monitor, Notify-User, Request Justification,or Store Evidence as configured.
