Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

GEODI Discovery enables discovery for many different sectors and purposes. The intelligent recognizers that come with Discovery provide the robust infrastructure needed for GEODI Discovery automatic classification.

Table of Contents
-zonetoc

Child pages (Children Display)

...

Discovery Lifecycle

There are more reports with GEODI Discovery.

The system admins and members of "ACC.Discovery" group can access the reports. The reports are visible in the workspaces only if "ACC.Discovery":true settings exist in the GenericSettings in Workspace Advanced settings.

Report: Discovery-Content Findings

Each row in the Content findings report is a discovery type. This report is much simpler than the content summaries report and can be useful to determine conforming and nonconforming sources.

View file
nameContentFindings.csv

Report: Discovery-Destroy

GEODI uses reporting infrastructure to generate remediation scripts. Destroy script is one of them.

There is no undo for Destroy. Please use it with care.

  1. Due to internet browser security measures scripts are generated in *.bat.txt extension. Please rename it to *bat, before use.

  2. We suggest, the scripts must best be used on the same machine as the GEODI server installed due to access rights and paths and other issues.

  3. The generated script is in Windows Batch language. You may change it to work in bash, python, or any other language.

Report: Discovery-Quarantine

Like destroy, quarantine is also a script. The script effectively moves the content to a determined place.

There is no undo for Quarantine. Please use it with care.

  1. Please make sure the Quarantine place has enough storage size.

Other terms are the same as Destroy.

Report: Discovery-Encryption

The encryption script generates encrypted files in the same place. You may run Destroy to destroy the originals.

  1. You may use different passwords in multiple scripts. Please keep the password in a secure place.

  2. You will need Winrar.

Report: Discovery-Batch-Masking

(info) This report requires a Masking license.

Batch masking is a GEODI DCC file to mask selected files. DCC can be run on GEODI Server. Masking covers local and network sources.

The script requires the following parameters.

...

Token → A token with a user that has masking permission. Obtain a token from <geoddi-url>/API.

...

The following are the basic steps for a Discovery Project. We suggest carrying these separately for each data source. You finalize the project when you discover all data sources. New data sources or discovery requirements may be handled in a similar manner.

  1. Determine the discovery purpose.

  2. Define the data source.

  3. Discover.

  4. Present/Report.

  5. Remediate/Action.

Determining the purpose of exploration provides a healthy start. You may have KVKK, HIPAA, PCI/DSS, Fraud, or other goals. Recognizers, reports, panels, and actions suitable for every purpose are available on DECE-STORE. Once the basic GEODI installation is complete, you must download the appropriate DECE-STORE modules. Introducing the resource, specifying authorizations, and many other operations are done with the Project Wizard.

...

The Discover phase is where personal data, financial data, and other specified data are discovered. It may take time, depending on the data size, scope of discovery, and options. We always recommend that you start with a sample exploration and decide on a full exploration based on the results. Exploration by sampling saves you a lot of time in this sense. Presentation of discovery results is provided through the Discovery Panel and Reports. GEODI can present the exploration results in a one-page summary or in great detail. In this way, it becomes easier to decide which sources, which types contain what kind of data, and what action you should take. With actions, source data can be destroyed, encrypted, or quarantined. Options such as bulk masking are also offered. Action results are reflected in your discovery panel and reports. You can continue this way until you minimize the risks.

Reports

The reports help you understand the data and discovery results.

...

A place to store masked files. Make sure there is enough storage in the place.

Report:Discovery- Content Findings(DB)

This report tells about which table/column contains sensitive data. It works only for DB content. For unstructured data, please use the Content Findings report.

View file
nameSampleDBReport.xlsx

Panels

A variety of ready-made panels come with GEODI Discovery. The appearance of the panels depends on the permissions.

The system admins and members of "ACC.Discovery" group can access the panels. The panels are visible in the workspaces only if "ACC.Discovery":true settings exist in the GenericSettings in Workspace Advanced settings.

Discovery Panel

This panel is very brief on all findings. For this panel, you can refer to the GEODI 131 tutorial.

PCI/DSS Panel

A PCI/DSS version of the Discovery panel comes with PCI/DSS module.

Client Panel

This panel is to monitor GDE ve Classifier agents. Please check the following page for the details. This panel Clients Paneli is visible only to System Admins.

...

Actions

GEODI Discovery comes with many actions that allow us to change the data. These actions allow you to destroy or quarantine the target data.

...

Panels

The panels show you a summary of GEODI exploration results. Thanks to the capabilities of the panels, you can access the results more easily than the reports.

...