Enterprise Recon 2.12.0

Data Type Profile

This section covers the following topics:

Overview

When you Start a Scan, you must specify the data types to scan your Target for.

Data type profiles are sets of search rules that identify these data types. ER2 comes with several built-in data type profiles that you can use to scan Targets.

See Data Types for more information on the data types available by default in ER2.

Permissions and Data Type Profiles

Resource Permissions and Global Permissions that are assigned to a user grants access to perform specific operations for data type profiles.

Operation Definition Users with Access
View data type profiles Access to view the Data Type Profile page.

  1. Global Admin.
  2. Data Type Author.
  3. Users without Global Permissions but have Scan privileges assigned through Resource Permissions.

Add data type profiles User can choose from the available data types to create a new data type profile.

  1. Global Admin.
  2. Data Type Author.

Add custom data types PII PRO User can create and share new custom data types.

  1. Global Admin.
  2. Data Type Author.

Modify data type profiles User can modify or archive data type profiles that:
  1. are shared with the user.
  2. were created by the user.
  1. Global Admin.
  2. Data Type Author.
  3. Users without Global Permissions but have Scan privileges assigned through Resource Permissions.

Add a Data Type Profile

To add a customized data type profile:

  1. Log in to the ER2 Web Console.
  2. On the Scans > Data Type Profile page, you can add:

    Type Description
    New data type profile On the top right side of the page, click + Add.
    New version of an existing data type profile

    From an existing data type profile, click Enterprise Recon 2.1 options gear icon. > Edit New Version.

    This creates a copy of the selected data type profile which you edit. It does not remove the original data type profile. The edited data type profile is tagged as a newer version (e.g. v2) while preserving the original data type profile (e.g. v1).
    Add a new version of an existing data type profile.

  3. On the New Data Type Profile page, enter a label for your data type profile.

  4. Select a data type category as described in the following table.
    Add a new version of an existing data type profile.
    Field Description
    List of data types

    Select the data types that you want to add to your data type profile.

    The displayed list of data types is dependent on the data type category that is selected. To view all available data types that are built-in with ER2, click on All Predefined Types category.

    To customize the data, click Customize. For more details, see Add a Data Type Profile.

    Regions / Countries panel

    The regions / countries panel in the sidebar shows you the number of regions or countries your selected data types span across.

    Not applicable to all built-in data types.

    Keep scans to one to three regions to reduce occurrence of false positives.
    Robust / Relaxed Search

    Robust Search: When selected, applies a stricter search to your scans that reduces the number of false positives that ER2 finds.
    This reduces the number of matches found and slows down your scans.

    Relaxed Search: When selected, applies a lenient search to your scans that produce more matches and, consequently, more false positives.
    This increases the number of matches found and scans more quickly than a Robust Search.

    Not applicable to all built-in data types.

    Search Bar

    Select the data types that you want to add to your data type profile.

    The displayed list of data types is dependent on the data type category that is selected. To view all available data types that are built-in with ER2, click on All Predefined Types category.

    To customize the data, click Customize. For more details, see Add a Data Type Profile.

Custom Data Type PII PRO

When creating a new version of an existing data type profile, custom data types that were applied will also be available for use in the new version of the data type profile.

To search for a specific custom data type when creating a new version of an existing data type profile:

  1. Log in to the ER2 Web Console.
  2. Go to Scans > Data Type Profile page.
  3. Click on the gear icon Enterprise Recon 2.2 options gear icon. next to the selected data type profile and choose Edit New Version.
  4. On the Search for panel, click on Custom Data.
  5. Use the Search Custom Data search bar to look for specific custom data types to be included for the new version of the data type profile.
    Select custom data types for the Login Credentials data type profile.
  6. Once done, click the Ok button to save the changes.

To add a custom data type to the profile, see Add Custom Data Type.

Advanced Features

The Advanced Features section allows you to select advanced features for identifying sensitive data.

The following advanced features are available:

Field Description
Enable OCR

Scans images for sensitive data using Optical Character Recognition (OCR).

OCR accuracy may be impacted by the following factors:

  • Font face, font size and context stored in the image.
  • Quality of the image being scanned.
  • Image noise (e.g. dust from scanned images).
  • Image format (eg. lossless or lossy images).

OCR is not supported for HP-UX 11.31+ (Intel Itanium) and Solaris 9+ (Intel x86) operating systems.

Enable EBCDIC mode

Scan file systems that use IBM's EBCDIC encoding.

Suppress Test Data

Ignores test data during a scan. Test data will not be in the scan report.

Filter Rules

Filter Rules are the same as Global Filters but apply only to the data type profiles they are created in. From the Filter Rules tab, click + Add and select from a list of search filters.

See Global Filters for more information.

Add search filters to the new data type profile.

Share a Data Type Profile

You own the data type profiles that you create. Created data type profiles are available only to your user account until you share the data type profile. To share a data type profile:

  1. On the Data Type Profile page, select the data type profile you want to share.
  2. Click the gear icon Enterprise Recon 2.2 options gear icon. and select Share.

Delete a Data Type Profile

To delete a data type profile:

  1. On the Data Type Profile page, select the data type profile you want to share.
  2. Click the gear icon Enterprise Recon 2.2 options gear icon. and select Remove.

You cannot delete a data type profile once it is used in a scan. A padlock Enterprise Recon 2.2 lock icon. will appear next to its name. You can still remove it from the list of data type profiles by clicking on the gear icon Enterprise Recon 2.2 options gear icon. and selecting Archive.

You can access archived data type profiles by selecting the Archived filter in the Filter by… panel.


PII PRO This feature is only available in Enterprise Recon PII and Enterprise Recon Pro Editions. To find out more about upgrading your ER2 license, please contact Ground Labs Licensing. See Subscription License for more information.