exfiltration

6 Dtwo policies tagged "exfiltration", including Block BigQuery Exfiltration and Cross-Project Writes, Block Bulk Export & External Staging (Snowflake). Browse by what the control does rather than which app it targets.

On this page

BigQuery
Linear
Power BI
Slack
Snowflake
Splunk

BigQuery

Block BigQuery Exfiltration and Cross-Project Writesingress · BigQueryInspects the raw GoogleSQL string carried by BigQuery SQL tools and denies any statement that moves data out of the tenant's own project — even when the call…

Linear

Block Linear Webhook Creationingress · LinearUnconditionally denies any Linear tool that creates, updates, or deletes a webhook — linear createWebhook, linear deleteWebhook, and update variants.

Power BI

Guard DAX Whole-Table Dumps in Power BIingress · Power BIPower BI semantic models front the warehouse: a model imports or DirectQueries lakehouse/warehouse tables — finance, HR, customer PII.

Slack

Slack: Block Agent Posts to External Channelsingress · SlackDenies Slack message-write calls whose destination is an externally shared Slack Connect channel.

Snowflake

Block Bulk Export & External Staging (Snowflake)ingress · SnowflakeBlocks Snowflake SQL-execution tool calls whose query text moves whole tables off the Snowflake perimeter — bulk export to cloud storage or a stage, and…

Splunk

Block SPL Commands That Write or Send Dataingress · SplunkMost people assume a Splunk search can only read.