Managing scan results in DSPM
Once the scan is complete, you can do the following with the results:
Viewing scan results
-
Go to Yandex Security Deck.
-
In the left-hand panel, select DSPM and go to the Scan history tab.
-
Select a scan.
-
Sensitive data found during the scan, if any, will be displayed on the Results tab. The information about each detected object is presented in the following columns:
Data type: Search category of the data, e.g.,FULL-NAME-RU-ML: Full name.Found occurrence: Sensitive data found.Data source: Data source name.Resource: Name of the resource the data was found in.Object path: Path to the file the data was found in.
Downloading scan results
As you download, a CSV file with the scan results is saved locally on your computer.
Note
The file can contain a maximum of 10,000 sensitive data records. To export a larger number of records, use export to Object Storage.
-
Go to Yandex Security Deck.
-
In the left-hand panel, select DSPM and go to the Scan history tab.
-
To the right of the scan, click and select Download results.
Alternatively, go to the scan page, click More , and select Download results.
-
In the Display sensitive data field, specify how to display names, contact information, and other personal data.
-
Click Download file.
Exporting scan results
When exporting, the file with scan results is saved to the bucket you select.
-
Go to Yandex Security Deck.
-
In the left-hand panel, select DSPM and go to the Scan history tab.
-
Click to the right of the scan and select Export results.
Alternatively, go to the scan page, click More , and select Export results.
-
In the window that opens, set the export settings:
-
In the Bucket field, select the bucket to save the results to.
-
In the Path to bucket field, set the prefix of the object to save the results to.
-
In the File name field, specify the name of the file to save the results to. The file will automatically get the
.csvextension. -
In the Service account field, select the service account with the
storage.uploaderrole for the selected bucket andkms.keys.encrypterfor the encryption key, if the bucket is encrypted. -
Click Validate and export to export the results with parameter validation.
If the selected service account does not have enough permissions for the operation, the information about this will be displayed on the Parameter validation tab.
Expand the section with information about missing roles, select the service account, and click Assign roles to grant the lacking permissions to this service account. Then click Validate and export again.
Alternatively, you can export the results without parameter validation by clicking the Export without validation. If the selected service account does not have enough permissions for the operation, you will see an error.
-
Viewing scan errors
- Go to Yandex Security Deck.
- In the left-hand panel, select DSPM and go to the Scan history tab.
- Select the scan and navigate to the Messages and errors tab.
For more information about scanning errors, see Troubleshooting Data Security Posture Management (DSPM).
Deleting scan results
-
Go to Yandex Security Deck.
-
In the left-hand panel, select DSPM and go to the Scan history tab.
-
To the right of the scan, click and select Delete.
Alternatively, go to the scan page, click More , and select Delete.
-
In the window that opens, confirm the deletion.