Alerts for Dropbox/ One Drive

[Simon_Baria]

Hi All, 

Is there a way to create an alert which will trigger if a large amount of data is being exfiltrated to something like Dropbox or One Drive? 

Thanks 

Simon

[Chris_Atkinson · Accepted solution]

If not already you could try testing a rule like this, note I've shown additional granularity just for information purposes.

There are caveats and would required the relevant blades to be enabled e.g. Application Control / SSL Inspection / Content Awareness.