Abstract: Systems and methods for defining and utilizing DLP sub-dictionaries include monitoring network traffic associated with one or more tenants of a plurality of tenants of a cloud-based system; identifying a document in transit based on the monitoring of network traffic; identifying, based on one or more DLP dictionary weights, at least one parent dictionary and at least one corresponding sub-dictionary to be searched; matching contents of the document against data patterns or phrases defined in the identified sub-dictionary; and triggering an alert or a policy action if at least one matched data pattern or phrase exceeds a predefined threshold determined in part by the one or more DLP dictionary weights.

Abstract: Systems and methods for visualization monitoring data from a cloud-based system include obtaining monitoring data from a cloud-based system, wherein the monitoring data is based on transactions associated with a plurality of users of a cloud environment; providing a Graphical User Interface (GUI) comprising a plurality of columns wherein each column comprises a plurality of filter cards; obtaining a plurality of filter card selections as inputs from the GUI; and displaying log data based on the plurality of filter card selections. The monitoring data can be for one or more of cloud security service transactions, application access via a Zero Trust Network Access (ZTNA) service, user experience metrics, and files accessed via the cloud environment.

Abstract: Systems and methods for visualization monitoring data from a cloud-based system include obtaining monitoring data from a cloud-based system, wherein the monitoring data is based on transactions associated with a plurality of users of a cloud environment; providing a Graphical User Interface (GUI) comprising a plurality of columns wherein each column comprises a plurality of filter cards; obtaining a plurality of filter card selections as inputs from the GUI; and displaying log data based on the plurality of filter card selections. The monitoring data can be for one or more of cloud security service transactions, application access via a Zero Trust Network Access (ZTNA) service, user experience metrics, and files accessed via the cloud environment.