Enterprise Recon 2.11.1

All Documentation > ER 2.11.1 > Scanning Overview > Data Type Profile

Data Type Profile

This section covers the following topics:

Overview
Permissions and Data Type Profiles
Add a Data Type Profile
Share a Data Type Profile
Delete a Data Type Profile

Overview

When you Start a Scan, you must specify the data types to scan your Target for.

Data type profiles are sets of search rules that identify these data types. ER2 comes with several built-in data type profiles that you can use to scan Targets.

See Data Types for more information on the data types available by default in ER2.

To create custom data types, see Add Custom Data Type PII PRO.

Permissions and Data Type Profiles

Resource Permissions and Global Permissions that are assigned to a user grants access to perform specific operations for data type profiles.

Operation	Definition	Users with Access
View data type profiles	Access to view the Data Type Profile page.	Global Admin. Data Type Author. Users without Global Permissions but have Scan privileges assigned through Resource Permissions.
Add data type profiles	User can choose from the available data types to create a new data type profile.	Global Admin. Data Type Author.
Add custom data types PII PRO	User can create and share new custom data types.	Global Admin. Data Type Author.
Modify data type profiles	User can modify or archive data type profiles that: are shared with the user. were created by the user.	Global Admin. Data Type Author. Users without Global Permissions but have Scan privileges assigned through Resource Permissions.

Add a Data Type Profile

To add a customized data type profile:

On the Scans > Data Type Profile page, you can add:

Type	Description
New data type profile	On the top right side of the page, click + Add.
New version of an existing data type profile	From an existing data type profile, click > Edit New Version. This creates a copy of the selected data type profile which you edit. It does not remove the original data type profile. The edited data type profile is tagged as a newer version (e.g. v2) while preserving the original data type profile (e.g. v1).

Type

Description

New data type profile

On the top right side of the page, click + Add.

New version of an existing data type profile

From an existing data type profile, click Enterprise Recon 2.1 options gear icon. > Edit New Version.

This creates a copy of the selected data type profile which you edit. It does not remove the original data type profile. The edited data type profile is tagged as a newer version (e.g. v2) while preserving the original data type profile (e.g. v1).
Add a new version of an existing data type profile.

On the New Data Type Profile page, enter a label for your data type profile.

Use a label name that describes the use case that the data type profile is built for.

Select a data type category as described in the following table.
Add a new version of an existing data type profile.

Field	Description
List of data types	Select the data types that you want to add to your data type profile. The displayed list of data types is dependent on the data type category that is selected. To view all available data types that are built-in with ER2, click on All Predefined Types category. To customize the data, click Customize. For more details, see Add a Data Type Profile.
Regions / Countries panel	The regions / countries panel in the sidebar shows you the number of regions or countries your selected data types span across. Not applicable to all built-in data types. Keep scans to one to three regions to reduce occurrence of false positives.
Robust / Relaxed Search	Robust Search: When selected, applies a stricter search to your scans that reduces the number of false positives that ER2 finds. This reduces the number of matches found and slows down your scans. Relaxed Search: When selected, applies a lenient search to your scans that produce more matches and, consequently, more false positives. This increases the number of matches found and scans more quickly than a Robust Search. Not applicable to all built-in data types.
Search Bar	Select the data types that you want to add to your data type profile. The displayed list of data types is dependent on the data type category that is selected. To view all available data types that are built-in with ER2, click on All Predefined Types category. To customize the data, click Customize. For more details, see Add a Data Type Profile.

Custom Data Type PII PRO

When creating a new version of an existing data type profile, custom data types that were applied will also be available for use in the new version of the data type profile.

To search for a specific custom data type when creating a new version of an existing data type profile:

Log in to the ER2 Web Console.
Go to Scans > Data Type Profile page.
Click on the gear icon next to the selected data type profile and choose Edit New Version.
On the Search for panel, click on Custom Data.
Use the Search Custom Data search bar to look for specific custom data types to be included for the new version of the data type profile.
Once done, click the Ok button to save the changes.

To add a custom data type to the profile, see Add Custom Data Type.

Advanced Features

The Advanced Features section allows you to select advanced features for identifying sensitive data.

The following advanced features are available:

Field	Description
Enable OCR	Scans images for sensitive data using Optical Character Recognition (OCR). OCR is a resource-heavy operation that significantly impacts system performance. As with all OCR software capabilities, the accuracy rate will always be lower when compared to scanning raw text data. OCR cannot detect handwritten information - only typed or printed characters. The images you scan with OCR enabled must have a minimum resolution of 150 dpi. It does not find information stored in screenshots or images of lower quality. OCR accuracy may be impacted by the following factors: Font face, font size and context stored in the image. Quality of the image being scanned. Image noise (e.g. dust from scanned images). Image format (eg. lossless or lossy images). OCR is not supported for HP-UX 11.31+ (Intel Itanium) and Solaris 9+ (Intel x86) operating systems.
Enable EBCDIC mode	Scan file systems that use IBM's EBCDIC encoding. Use EBCDIC mode only if you are scanning IBM mainframes that use EBCDIC encoded file systems. This mode forces ER2 to scan Targets as EBCDIC encoded file systems, which means that it does not detect matches in non-EBCDIC encoded file systems.
Suppress Test Data	Ignores test data during a scan. Test data will not be in the scan report.

Field

Description

Enable OCR

Scans images for sensitive data using Optical Character Recognition (OCR).

OCR is a resource-heavy operation that significantly impacts system performance. As with all OCR software capabilities, the accuracy rate will always be lower when compared to scanning raw text data.

OCR cannot detect handwritten information - only typed or printed characters. The images you scan with OCR enabled must have a minimum resolution of 150 dpi. It does not find information stored in screenshots or images of lower quality.

OCR accuracy may be impacted by the following factors:

Font face, font size and context stored in the image.
Quality of the image being scanned.
Image noise (e.g. dust from scanned images).
Image format (eg. lossless or lossy images).

OCR is not supported for HP-UX 11.31+ (Intel Itanium) and Solaris 9+ (Intel x86) operating systems.

Enable EBCDIC mode

Scan file systems that use IBM's EBCDIC encoding.

Use EBCDIC mode only if you are scanning IBM mainframes that use EBCDIC encoded file systems.
This mode forces ER2 to scan Targets as EBCDIC encoded file systems, which means that it does not detect matches in non-EBCDIC encoded file systems.

Suppress Test Data

Ignores test data during a scan. Test data will not be in the scan report.

Filter Rules

Filter Rules are the same as Global Filters but apply only to the data type profiles they are created in. From the Filter Rules tab, click + Add and select from a list of search filters.

See Global Filters for more information.

Add search filters to the new data type profile.

Data Type Profile A has a search filter that excludes the /etc/ directory. If Data Type Profile A is used when scanning Target X, the contents of /etc/ directory on Target X will be excluded from the scan.

You own the data type profiles that you create. Created data type profiles are available only to your user account until you share the data type profile. To share a data type profile:

On the Data Type Profile page, select the data type profile you want to share.
Click the gear icon and select Share.

Delete a Data Type Profile

To delete a data type profile:

On the Data Type Profile page, select the data type profile you want to share.
Click the gear icon and select Remove.

You cannot delete a data type profile once it is used in a scan. A padlock will appear next to its name. You can still remove it from the list of data type profiles by clicking on the gear icon Enterprise Recon 2.2 options gear icon. and selecting Archive.

You can access archived data type profiles by selecting the Archived filter in the Filter by… panel.

Once a data type profile is used in a scan, the profile is locked. This makes sure that it is always possible to trace a given set of results back to the data type profiles used.

PII PRO This feature is only available in Enterprise Recon PII and Enterprise Recon Pro Editions. To find out more about upgrading your ER2 license, please contact Ground Labs Licensing. See Subscription License for more information.