How to Create a Scan Playbook that Searches for a Single Data Type

Overview

Recall that Scan Playbooks are a kind of decision tree which instruct Spirion Sensitive Data Platform on what to do during scans, such as quarantine, shred, or redact sensitive data. For more information about Scan Playbooks, see How to Add a New Scan Playbook.

Use the following steps to create a single playbook that searches for a single data type:

1. Log in to Spirion Sensitive Data Platform with a user account that is a member of a role which contains the permission "Create Playbooks" (see How to Add a New Role for info about creating a new user role):
   
   
    
2. From the left-side navigation menu, navigate to the Scan Playbooks page (select Scans > Scan Playbooks).
   
   
    
3. Select the blue "Actions" button in the top right corner and click Add Playbook from the sub-menu that appears.
   
   
    
4. The New Playbook dialog appears. Enter a Name and Description for the new playbook and select the blue Continue button.
   
   
    
5. Select the pencil icon in the diamond-shaped decision point below the "Start" rectangle.
   
   
    
6. On the Decision Point dialog, enter a descriptive name for this decision point, such as "Contains SSN," and select Data Types in the drop-down menu.
   
   
7. Verify that the second drop-down menu is set to Contains. 
   
   
    
8. Select the ellipsis button (three dots) next to the following field.
   
    
9. Navigate to your desired data type and select the right-arrow icon.
10. 1. Data Type examples:
    2. • Date of Birth
       • Credit Card Number
       • Email Address
       • File Hash
       • IMEI
       • Keyword
       • Password
       • Personal Address
       • Telephone Number
       • Regular Expression
       • Social Security Number
         
         
10. Click the OK button on the bottom of the window.
    
    
11. Click the blue "Save" button at the bottom of the window. 
    
    Note: At least one "Classification" or "Shred" action must be set in a playbook (on either the "Yes" or "No" path).
12. On the Yes branch, click the Select Action drop-down menu and choose Classification from the list of options.
    
    
13. In Action Options, select Perform Action on Database Only. This option ensures that when the playbook runs, the classification is applied solely to the database (classification.db) used by the Agent rather than modifying file metadata or the file itself. Essentially, the action updates only the internal database records and does not alter the original file on disk.
    
    
14. In Classification Type, select Add Classification from the drop-down menu.
    
    
15. In Select Classification, choose your desired classification (for example, Secret).
16. 1. The Classification options shown in this menu are sourced in the Global Classifications section of Spirion Sensitive Data Platform (Settings > Global Classifications). If the classification you seek does not appear in the "Select Classification" drop-down menu, you can create your own custom classification on the Global Classifications page (this requires your user account is a member of the Admin role).
       
       
16. Check the Automate Action checkbox.
17. Click the circular plus ( + ) icon below the Classification rectangle to open the available options of what to do next: Terminate this (Yes) branch as Completed after classfication or create another step (Decision option).
    
    
18. Select the Completed option.
    
    
19. On the No branch, click the Select Action drop-down menu and choose Take No Action from the list of options.
    
    
20. Check the Automate Action checkbox and click the plus (+) icon.
    
    
21. Select Completed to terminate the branch.
    
    
22. Save by clicking the Save icon at the top of the page next to the blue "Actions" button.
    
    
23. A message appears in the bottom left corner of the page stating that the playbook has been successfully saved. 
    
    
24. To find your playbook, enter its name in the Search box on the Scan Playbooks page.