Technical Library | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Creating Remediation Scripts for TRITON AP-DATA > Discovery
Discovery
Creating Remediation Scripts | Data Protection | Version 8.3.x
What is discovery?
Discovery is the act of automatically scanning data at rest, classifying it, and potentially enforcing an action on the classification.
Discovery can be performed by 2 components in the
Forcepoint™ TRITON® AP-DATA system:
*
TRITON AP-DATA crawler, which performs Network discovery.
*
TRITON AP-ENDPOINT DLP, which performs Endpoint discovery.
Both components perform essentially the same activity.
Once the documents are classified as having matched a policy rule, an action plan associated with this rule is executed. The action plan specifies what happens next, and this can include running a remediation script.
What is a discovery incident?
An incident is an object that contains information about the file which was matched by a Discovery Policy Rule. It also contains information about the rules it matched, and other meta-data such as the file's permissions, the discovery policy engine name, and so on.
When running remediation scripts, an XML file containing the incident's detail is generated. The full path name is presented to the script as the first command line parameter.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Creating Remediation Scripts for TRITON AP-DATA > Discovery
Copyright 2016 Forcepoint LLC. All rights reserved.