1. A method comprising: identifying, by a processor, a request by an application to access a file from a shared storage device over a network; enabling monitoring on a local data store to detect file system requests by the application in response to the identifying; creating a first profile of the file from the shared storage device, wherein the profile comprises metadata associated with the file; analyzing data associated with the file to determine if the data violates a data loss prevention (DLP) policy, wherein the analyzing the data comprises: detecting write operations to a new file stored to the local data store by the application; creating a second profile, the second profile associated with the new file, wherein the second profile associated with the new file comprises metadata associated with the new file; and comparing the first profile to the second profile; and enforcing a response rule associated with the file if the data associated with the file violates the DLP policy, wherein the enforcing comprising enforcing the response rule against the new file when the second profile matches the first profile and not enforcing the response rule against the new file when the second profile does not match the first profile.