DeviceLock Discovery provides organizations visibility and control over confidential data and complements the protection against unnoticed and/or inappropriate data leakage of DeviceLock Endpoint DLP Suite. DeviceLock Discovery automatically scans "data at rest" on network shares, storage systems and Windows-based computers inside and outside the corporate network and provides options to protect documents with sensitive content by corrective measures. Optionally Incident Management processes can be initiated by sending real-time alerts to a SIEM system (SIEM = Security Information and Event Management) used in the organization.
Identified are sensitive and business-critical data by individual requirements and/or structured data detection methods, such as key words or regular expressions (RegExp). DeviceLock Discovery can reduce potential dangers of identified sensitive content at undesirable locations with remediation actions. Confirmed file type recognition (more than 5,300 file types are detected) is another method of content analysis, which can be used in DeviceLock Discovery independently or in combination with the investigation of the text content. Regardless of the file extension or the header the binary content is checked in a signature-based method to verified detect the file type.
In addition, a large amount of file and document properties can be used to select a document or class of documents for Data Leak Prevention (DLP) control. Through the combination of content definitions the flexibility of content-aware rules is further improved. Several content criteria with different detection methods and data types can be combined using logical (AND/OR/NOR) operators to set definitions of virtually unlimited complexity
In addition to the content detection in text-based data objects DeviceLock Discovery can extract and analyze data from images in text documents and graphic files in many image formats through an integrated optical character recognition (OCR). With more than 30 recognized languages, using DeviceLock keyword dictionaries and regular expressions as well as dozens of other advanced features, these highly efficient OCR provides the option to discover and protect sensitive data in data pools using graphical representations.