How to Work with Scan Results - Overview

Overview

The Scan Results screen shows the results of all scans.

It's important to remember:

• There are two types of scans:
• • Discovery Scans
  • Sensitive Data Scans
• You can search for scans based on different criteria and filter views.

How to Sort Scan Results

The blue arrow next to a column heading indicates what metric is being used to sort the scan result shown.

• By default, scan results are shown sorted by the Date/Time Most Recent table column.
  
  
• Select any column head to sort your scan results by that column metric.

Scan Results help you understand:

• What data is being scanned
• What type of scan was run, such as "Discovery" or "Sensitive Data" scan
• Date of the scan
• Playbook(s) used by scans
• What Data Types (bank account numbers, driver license numbers, social security numbers, etc.) were found
• Who owns the Targets being scanned
• Location(s) of the sensitive data discovered by the scan
• Results and resolution status of the scans

More information about the information revealed by the Scan Result table is given below, as well as in the tooltips on the "Scan Results" page itself in Spirion Sensitive Data Platform.

How to View Scan Results

To view Scan Results use the following steps:

1. From the left side navigation menu, click Scans.
   
   
2. Next, click Scan Results from the navigation menu.
   
   
3. The Find Scan Results page displays.
4. From the selection criteria on the right, select options from the drop-down list to sort scan results and click Find Scan Results. Else, just click Find Scan Results.
   
   
5. The "Scan Results" page opens.
6. Scans Results are displayed in a list sorted by column.
7. • NOTE: The blue arrow next to a column heading indicates what metric is being used to sort the scan result shown. By default, scan results are shown sorted by the Date/Time Most Recent column. Select any column head to sort by that column metric.
     
     
   • Scan Type - Either Discovery (metadata only) or Sensitive Data scan.
   • • See the icons below.
     • Note that Discovery scans scan for metadata only, they do not scan for sensitive data.
       
   • Scan Name - Name of the scan. Click the icon to see a history of scans that have found the location (shown in the location column).
   • Priority (Weighting) - Calculated from the weight assigned to the playbook decision combined with playbook nodes directly after the playbook, the data type weights, and the number of matches in a given location.
   • Date/Time Discovered - Date/time the location was discovered (Discovery scan). First date/time a match was discovered in the location (Sensitive Data scan). Does not change if the location is discovered multiple times.
   • Date/Time Most Recent - The most recent time a scan found the location.
   • Playbook(s) - List of every playbook that has been used by any scan that found this location. Mouse over entry for more information.
   • Playbook Status - Status of each playbook from the Playbook(s) column. Mouse over entry for more information.
   • • Examples: Processing, Complete, User action required (such as manual input needed), User intervention required (such as file cannot be redacted, action failed), etc.
   • Data Type(s) - Sensitive data types found in the location (social security numbers, credit card numbers, SIN, etc.).
   • • Example 1: A scan searches for 10 data types, but a given location contains only 1 data type.
     • Example 2: Multiple data types are in the same location: Date of Birth, E-Mail Address, Social Security Number. See below.
       
       
   • Classification(s) - Classifications of the data captured by the scan (Classified, Secret, Top Secret, custom classifications, etc.)
   • Location - Location from your scan where sensitive data matches were found. This is the full file path to the file that contains the sensitive data (social security numbers, credit card numbers, etc.) discovered. Triple-click any Location and copy it, if desired, for entry elsewhere in Spirion Sensitive Data Platform, such as the Global Ignore Lists (Admin users only) on the "Scans Settings" page.
   • • Location Examples:
     • • C:\Passwords\passwords.txt
       • \\20.60.220.111\project-Adam-files\myproject\addresses.txt
       • Google Drive: smithj@myCompany.net/ProjectData.docx
       • https://MyCompany.sharepoint.com/ProjectA/Shared Documents/SensitiveData.docx
   • Location Type - The type of location. File, SharePoint, Cloud E-Mail Message, Cloud E-Mail Attachment, etc. This information is required for any Location (file path) entered into the Global Ignore List (Settings → Application Settings → Scans Settings → Global Ignore Lists).
   • Match Count - The count of sensitive data matches found in the location.
   • • This count can include matches from multiple different scans. It simply counts the data matches linked to the location. If a scan finds 10 instances of the same SSN in a location, the count is 10, not 1.
   • Most Recent Action - Most recent playbook action taken (sensitive data file shredded, redacted, classified, etc.). Click the icon for recent action history.
   • Agent Scanning - Agents performing the scan that discovered the location.
   • Target Being Scanned - Target being scanned
   • File Owner - Owner of the Location file
   • Assignee - User or role is assigned to a location via a playbook Assign card.
     
     Sample Scan Results - 1st half
     
     
     Sample Scan Results - 2nd half (scroll right)
     
7. You can further sort the results as follows:
8. 1. Click Actions.
   2. Select any of the following options:
   3. • View Scan Results by Match - View scan results by sensitive data match, such as
      • View Results Upload Status -
        
        
   3. You can Customize the Columns:
   4. 1. Click Actions.
      2. Select Customize Columns.
         
         
8. Select the columns you want to display and click Customize.
9. • See "Customize Scan Results Columns" for more information.
     
     
9. Use Filters to locate scans using specific criteria.
10. • See "Using Filters to Find Scan Results" for more information.