Documentation Version: er2.0.28-docs-1.1

Data Type Profiles

When you Start a Scan, you must specify the data types to scan your Target for.
Data type profiles are sets of search rules that identify these data types. ER2 comes with several built-in data type profiles that you can use to scan Targets.

This section covers the following topics:

See Data Types for the list of data types available by default in ER2.

To create custom data types, see Add Custom Data Type. See the Ground Labs website for more information on available data types.

Permissions and Data Type Profiles

Resource permissions and Global Permissions that are assigned to a user grants access to perform specific operations for data type profiles.

Operation Definition Users with Access

View data type profiles

Access to view the DATA TYPE PROFILES page.
  1. Global Admin
  2. Data Type Author
  3. Users without Global Permissions but have Scan privileges assigned through Resource Permissions.

Add data type profiles

User can choose from the available data types to create a new data type profile.
  1. Global Admin
  2. Data Type Author

Add custom data types

User can create and share new custom data types.
  1. Global Admin
  2. Data Type Author
Modify data type profiles

User can modify or archive data type profiles that:

  1. are shared with the user.
  2. were created by the user.
  1. Global Admin
  2. Data Type Author
  3. Users without Global Permissions but have Scan privileges assigned through Resource Permissions.

Add a Data Type Profile

To add customized a data type profile:

  1. On the SCANNING > DATA TYPES PROFILES page, you can add:

    Type

    Description

    New data type profileOn the top right side of the page, click + Add.
    New version of an existing data type profile

    From an existing data type profile, click > Edit New Version..

    This creates a copy of the selected data type profile which you edit. It does not remove the original data type profile. The edited data type profile is tagged as a newer version (e.g. v2) while preserving the original data type profile (e.g. v1).

  2. On the New Data Type Profile page, enter a label for your data type profile.
    Use a label name that describes the use case that the data type profile is built for.
  3. Select a data type category as described in the following table.

    FieldDescription
    List of data types

    Select the data types that you want to add to your data type profile.

    The displayed list of data types is dependent on the data type category that is selected. To view all available data types that are built-in with ER2, click on All Predefined Types category.

    To customize the data, click Customise. For more details, see Add a Data Type Profile

    Regions / Countries panel

    The regions / countries panel in the sidebar shows you the number of regions or countries your selected data types span across.

    Keep scans to one to three regions to reduce occurrence of false positives.
    Robust / Relaxed Search

    Robust Search: When selected, applies a stricter search to your scans that reduces the number of false positives that ER2 finds.

    This reduces the number of matches found and slows down your scans.

    Relaxed Search: When selected, applies a lenient search to your scans that produce more matches and, consequently, more false positives.

    This increases the number of matches found and scans more quickly than a Robust Search.

    Search BarUse the search bar to quickly look for a specific predefined data type.

Custom Data Type

When creating a new version of an existing data type profile, custom data types that were applied will also be available for use in the new version of the data type profile.

To search for a specific custom data type when creating a new version of an existing data type profile:

  1. Go to the SCANNINGDATA TYPE PROFILES page.
  2. Click on the gear icon next to the selected data type profile and choose Edit New Version..
  3. On the Search for panel, click on Custom Data.
  4. Use the Search Custom Data search bar to look for specific custom data types to be included for the new version of the data type profile.
  5. Once done, click the Ok button to save the changes.

To add custom data type to the profile, see Add Custom Data Type.

Advanced Features

The Advanced Features section allows you to select advanced features for identifying sensitive data.

The following advanced features are available:

Field Description
Enable OCR Scans images for sensitive data.
OCR is a resource-heavy operation that significantly impacts system performance.
OCR cannot detect handwritten information, only typed or printed characters. The images you scan with OCR enabled must have a minimum resolution of 150 dpi. It does not find information stored in screenshots or images of similar quality.
Enable EBCDIC mode Scan file systems that use IBM's EBCDIC encoding.
Use EBCDIC mode only if you are scanning IBM mainframes that use EBCDIC encoded file systems.
This mode forces ER2 to scan Targets as EBCDIC encoded file systems, which means that it does not detect matches in non-EBCDIC encoded file systems.
Suppress Test Data Ignores test data during a scan. Test data will not be in the scan report.
Enable Voice Recognition

Enables voice recognition when scanning WAV and MP3 files.

Voice recognition is a resource-intensive feature that significantly impacts system performance.
Support for voice recognition should be considered preliminary at this time.

FILTER RULES

Filter Rules are the same as Global Filters but apply only to the data type profiles they are created in. From the Filter Rules tab, click + Add and select from a list of search filters.

See Global Filters for more information.

Data Type Profile A has a search filter that excludes the /etc/directory. If Data Type Profile A is used when scanning Target X, the contents of /etc/ directory on Target X will be excluded from the scan.

Share a Data Type Profile

You own the data type profiles that you create. Created data type profiles are available only to your user account until you share the data type profile. To share a data type profile:

  1. On the Data Type Profiles page, select the data type profile you want to share.
  2. Click the gear icon and select Share.

Delete a Data Type Profile

To delete a data type profile:

  1. On the Data Type Profiles page, select the data type profile you want to delete.
  2. Click the gear icon and select Remove.

You cannot delete a data type profile once it is used in a scan. A padlock will appear next to its name. You can still remove it from the list of data type profiles by clicking on the gear icon and selecting Archive.

You can access archived data type profiles by selecting the Archived filter in the Filter by... panel.

Once a data type profile is used in a scan, the profile is locked. This makes sure that it is always possible to trace a given set of results back to the data type profiles used.