Endpoint DLP Required: Print and screenshot monitoring requires an endpoint DLP agent installed on the workstation. The agent intercepts print spooler operations and screen capture API calls to detect sensitive data being printed or screenshotted.

Printable Sensitive Document

CONFIDENTIAL — Employee Records

NameSSNDOBEmailBank Account
John A. Smith078-05-112001/15/1985john.smith@example.com021000021 / 4839201756
Jane B. Doe219-09-999903/22/1990jane.doe@example.com021000021 / 6712849301
Robert C. Johnson323-45-678907/04/1978robert.johnson@example.com071000013 / 9928374651
Sarah M. Williams167-23-456711/30/1982sarah.williams@example.com071000013 / 3345678901
Michael R. Brown482-91-345608/19/1975michael.brown@example.com026009593 / 8876543210

Payment Card Information

CardholderCard NumberExpirationType
John A. Smith4111-1111-1111-111112/2026Visa
Jane B. Doe5500-0000-0000-000406/2027Mastercard
Robert C. Johnson3400-000000-0000909/2025American Express

Print & Screenshot DLP Tests

Test each of the following scenarios to validate your endpoint DLP coverage for print and screen capture.

Physical Printer

Send the document above to a physical printer. Endpoint DLP should intercept the print spooler and detect sensitive data in the print job.

Print to PDF

Use the "Print to PDF" or "Save as PDF" option. DLP should treat virtual PDF printers the same as physical printers and scan the output.

Screen Capture

Try using Print Screen, Snipping Tool, or screenshot software while this page is visible. DLP should detect screen capture of sensitive content.

Virtual Printer

Attempt to print to virtual printers like Microsoft XPS Document Writer or OneNote. DLP should monitor all print destinations equally.