Forcepoint DLP tool operates at the endpoint level, monitoring data in transit and at rest, and can be configured to detect and block sensitive data based on predefined policies or rules. It may use techniques such as content inspection, data classification, keyword matching, and regular expressions to identify sensitive data and prevent it from leaving the organization without proper authorization.