Abstract: In some examples, a computer-readable medium storing an outbound email quarantine (OEQ) tool includes computer-executable instructions, which, when executed by a processor, cause the processor to prompt a designated reviewer to determine whether to permit transmission of an outbound email in response to a quarantine status of the outbound email indicating that the outbound email is quarantined, where the designated reviewer is determined based on characteristics of the outbound email; modify a header of the outbound email to bypass the one or more DLP policies in response to an indication from the designated reviewer to permit transmission of the outbound email; and transmit the outbound email having the modified header.

Abstract: A method which includes receiving a corpus of labelled documents according to a plurality of filters and parsing, by a computer processor, the corpus. The method further includes vectorizing, by the computer processor, the parsed corpus to obtain vectorized documents; and training, by the computer processor, a machine-learned model using, at least a portion, of the vectorized documents. The method further includes extracting word importances from the trained machine-learned model and retaining the words with associated importances that satisfy a criterion, wherein the retained words are suggested keywords. The method further includes incorporating the suggested keywords in a policy of a data leakage prevention system.