What is a one sentence summary of your feature request?
Full display of values in the Matched Items column in Content Aware Report
Please describe your idea in detail. What is your problem, why do you feel this idea is the best solution, etc.
Currently, the values in the Matched Items column within Reports and Analysis-Content Aware Report are displayed in a shortened or partially masked form. This limitation makes it difficult to perform internal investigations based on DLP events, since analysts cannot clearly see which specific data fragments triggered the detection. As a result, identifying the types of information most frequently transmitted or leaked becomes significantly more time-consuming.
Additionally, during further analysis in SIEM systems, Matched Items are transferred in a hidden format, which complicates incident investigation and correlation across different data sources. Having full visibility of the matched content directly in the Content Aware Report would reduce unnecessary switching between tools, improve the accuracy of incident assessment, and speed up response actions.
The proposed solution is to introduce an option that allows full display of Matched Items without masking. This functionality would provide more transparency during investigations, make data classification trends easier to understand, and improve the overall efficiency of security teams working with DLP events and downstream SIEM integrations.
How do you currently solve the challenges you have by not having this feature?
Right now, the team has to spend extra time checking additional logs and data sources to understand what exactly was matched. This slows down investigations and reduces how deeply incidents can be analyzed, because some details are harder to confirm without seeing the full Matched Items directly in the report.