Quantcast
Viewing all articles
Browse latest Browse all 11462

DLP Incident report - Data Inconsistency

Oui, j'ai besoin d'une solution

Hello,

I am running a report via DLP that needs to show:

-Created Date
-File name shows up in 'Location'
-Number of PII
-Location
-Last accessed Date

I can pull the data easy enough, but I am running into what looks like data inconsistency issues.

If you take a look at the Incidents_detail_redact_capture file, you'll see that the scan and detection date is 06/02/15.

*File Created Date: 11/24/14

*Last Modified: 11/24/14

*Last accessed date: 03/25/15

Now take a look at the Attibutes_snip_redact_capature file.

*Data User Last Access: 06/08/2015 

*File Access History Start Date: 04/16/2015

*File Last Access Date: 06/08/2015

I have few questions :

Can anyone tell me what the difference is between "Last Access Date" and "File Last Access Date"?

File Last Access Date appears to be connected to Data User Last Access date...who is the "Data User"? is it the "Data Owner" or is the DLP Scan (dlscan)?

How can the "file access history start date" be before the actual scan happened and before the "last accessed date"?

Also, can someone tell me where I can find a list of the LDAP attributes and the definitions for each?

Any help you all can provide would be greatly appreciated.


Viewing all articles
Browse latest Browse all 11462

Trending Articles