Discovery History
Overview
It is possible to view the history of executed jobs, the history of discovered sensitive information, and the history of administrator reviews.
The Discovery History section provides three types of historical information:
Run History: Display the execution history of Discovery jobs
Detection History: Allow tracking of changes in the detected results over time
Verification History: Provide a history of the administrator’s review of the results
Run History
Discovery jobs have various status information.
(For detailed information on status, refer to the Controlling Discovery Job Execution section in Discovery Jobs.)
Clicking on a specific row in the list reveals detailed information.
Detection Profiles : List the names of detection profiles associated with the job.
Connections : List the names of connections mapped to the job, and the progress of each connection's scan is displayed as a bar graph.
Running Details : Provide detailed logs of the job execution. If a failure occurs, the logs help identify the cause and guide corrective actions. It also shows who initiated the job when run manually.
Detection History
When sensitive information is discovered, it is recorded in the Detection History.
In the Detection History, to view the detected items, the verification action (Accept / False Positive) in the Scan results must be performed first.
Clicking on a specific row in the list reveals detailed information.
Detection Profiles : List the names of detection profiles associated with the job.
Sensitive Items Samples : Display five samples of the discovered sensitive information.
Verification History
The process involves Automatic Discovery → Human Judgment → Confirmation of true positives, which are then tagged in the Inventory. Therefore, the administrator must verify whether the detected sensitive information is a true positive or a false positive in the Scan Results. Despite the advancements in AI classifiers and the precision of regular expressions, it is not possible to achieve a 0% false positive rate with current technology. As a result, the administrator reviews the scan results, marking correct detections as Accept and incorrect ones as False Positive. The administrator's decisions are then recorded in the Verification History.