When Trellix DLP Endpoint - SaaS Discovery triggers a discovery rule, it generates an incident in the incident management workspace in ePO - SaaS.
In ePO - SaaS Protection Workspace, click the incidents in the Data Protection Overview to open the incident management workspace.
In the Filter By pane, from the drop down, select Data at Rest (Local).
The Filter By and Incidents panes refresh and display the incidents generated by the Discovery feature.
Note
If you return to Protection Workspace, the incident management workspace returns to display Data In-Use/Motion incidents.