As illustrated in FIG. 3, at step 302, one or more of the systems described herein may monitor, through at least one filter, data input to an application during execution. For example, monitoring module 104 may, as part of server 206 in FIG. 2, monitor, through one or more filters, data 232 input to application 230 during execution. As used herein, the phrase “monitor” generally refers to any action that identifies data input to the application to enable the data to be scanned for data loss prevention, as discussed further below. Moreover, as used herein, the term “filter” generally refers to a component that identifies, isolates, extracts, and/or analyzes data directed to a destination (e.g., a file system, network packet, operating system clipboard, and/or inter-process communication module) without necessarily preventing the data from reaching that destination.
