View Findings By File

This article describes how to do the following:

• View the findings of files across the environment.
• Leverage advanced filters to display files with multiple data types and various combinations.

1. In Prisma Cloud DSPM, go to Inventory > Files.
2. View the following information for each file:

   • Name: The name of the file.
   • Asset: The asset associated with the file. Click on the asset to open a new window containing detailed information about the asset.
   • Cloud: The type of cloud where the file resides.
   • Mouse hover over the Cloud icon to reveal the name of the cloud.
   • Service: The service associated with the file, for example Storage Account or File Share.
   • File Size: The size of the file.
   • File Type: The type of file.
   • Status: The status of the file, for example, the file has been deleted or the file still exists.
   • Data Types: The type of data in the file, for example last names or credit card expiration dates.

     • The data types are color-coded to denote their severity.
     • Mouse hover over the data types to reveal more details about the data type.
     • View the number of different data types found in the file. Mouse hover over the Data Types number to reveal additional data types in the file.
   • Findings Count: The number of data type records in the file.
   • Labels: The labels associated with the file.
   • Folder: The file path of the folder containing the file.
   • Created Time: The date and time the file was created.
   • Last Modified: The date and time the file was last modified
   • Issues: Issues associated with the file, for example, sensitive information is ‘open to the world’.
   • Shadow Backup: The status of the shadow backup.
   • Ignored: The ignore status of the file.

Filter the Findings

• Display files with multiple data types and various combinations
• Leverage advanced filters to display files with multiple data types and various combinations. For example, use the filters to find files containing credit card numbers exposed to the public.

  

Show the File Details

Click on a data type in the Data Types column to open a side window and reveal more information about the data types in the file. For example, view samples of the data type, the console URL, and the public URL.

Copy Data Types Samples

Mouse hover over the Samples column, and click the Copy icon to copy the data type samples.

Report False Positives

Do the following to report false positives:

1. Click on a data type in the Data Types column to open a side window. In the side window, click the ellipse, and select Report False Positive.

   

   OR: In the Data Types column, click on a data type and select Report False Positive.

   
2. In the Report False Positive pop-up, select the data mismatches and/or classification errors you want to report to Prisma Cloud DSPM.
3. Share examples of the data mismatches and/or classification errors, while making sure to avoid sensitive information. To share samples, mouse hover over the Samples column, and click the Copy icon to copy the data type samples.
4. Click Send. A message pop up confirms the report has been sent.

Export the Findings

In the Findings window, click Export Table. A .csv file containing the file findings is downloaded to your computer.