Data Loss Prevention

 View Only
  • 1.  Discover incident report with match information?

    Posted Apr 05, 2018 04:25 PM

    Is there any way to create a report that includes the match information?  A regular export contains the rest of the incident information, including the file name, but does not include the value that was matched.  After running Discovery, we have a large number of incidents and I would like to be able to review them with management before remediating.  The only way I know of to see the match info is to open the incident.  I can see why creting this report would be a risk in itself, but still wondering if it's possible.



  • 2.  RE: Discover incident report with match information?

    Trusted Advisor
    Posted Apr 05, 2018 05:20 PM

    Cyberwolf..

    There is no way to do this in the UI or Print reports.. 

    You would need to use the reporting API to do it, this would allow you to pull all of the right info out of the Encrypted DB.

    The other option is to generate a Export Web Archive Report which is in HTML and that way all is externally available and would work a bit faster than the UI. This way there is only a small subset taken out.

    If you are reall good with HTML and Frames, you might be able to take the HTML and reformat it to show a bit more data.

    Though as you mention this would take the info out of the system - A Risk.

    Good Luck,

    Ronak

    PLEASE MARKED SOLVED WHEN POSSIBLE