How to notify admin and suspend user if user downloads large amount of files in 20 minutes?

Question

Helo,

I require to notify admin and suspend user if user downloads large amount of files in 20 minutes.

which security policy can be considered? an activity policy/DLP policy/File Policy/an alert policy ?

Thanks,

Answer 1

Activity alerts/alert policies if you have "basic" O365 licensing, MCAS policies if you are licensed for that: https://learn.microsoft.com/en-us/cloud-app-security/data-protection-policies