Enterprise DLP introduced a new predefined Archive Scan
Threshold Exceeded data pattern to detect when any
supported archive file forwarded to Enterprise DLP exceeds the
supported archive file parameters (nesting levels, sub-files, or total
extracted text size).
Enterprise DLP inspects up to the 125 MB text size limit when the
extracted text of an archive file exceeds 125 MB. For example, the extracted
text size of a forwarded archive file is 150 MB. In this case, Enterprise DLP inspects the first 125 MB only.