DLP Endpoint

Hi,

Can DLP agent on endpoint scan files on local drive and if there is a policy match, add a watermark to the file (basicall classify files).  Can this be done using flexresponse ? How complex is this ?