exosp-pii-findings
Fetch PII findings for specified date range from Exosphere service.
exosp-pii-findings [profile=PROFILE] [duration=NUM{mon|w|d|h|m|s}] [from=yyyyMMddHHmmss] [to=yyyyMMddHHmmss] [order=ORDER]
- profile=PROFILE
- Connect profile code of Exosphere
- duration=NUM{mon|w|d|h|m|s}
- Scan only recent data. You should use s(second), m(minute), h(hour), d(day), mon(month) time unit. For example,
10s
means data from 10 seconds earlier. - from=yyyyMMddHHmmss
- Start time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- to=yyyyMMddHHmmss
- End time of range. yyyyMMddHHmmss format. If you omit time part, it will be padded by zero.
- order=ORDER
- asc or desc.
Output Fields
Field | Type | Name | Description |
---|---|---|---|
_time | Date | Timestamp | Event occurrence time |
profile | String | Connect profile | Exosphere connect profile code |
emp_name | String | Name | e.g. Scott |
dept_name | String | Department name | e.g. Sales |
hostname | String | Hostname | e.g. DESKTOP-XXXXXXX |
os_name | String | OS name | e.g. windows, macos |
user | String | User | e.g. OS account name |
detection_type | String | Detection type | e.g. Real Time Detection, Admin Scheduled Scan, User Full Scan, User Custom Scan |
inspection_type | String | Inspection type | e.g. Quick, Full |
protection_type | String | Protection type | e.g. No Protection, Encryption |
protection_result | String | Protection result | e.g. No Protection, Success, Fail |
file_name | String | File name | Name of the detected file containing PII. |
file_size | Long | File size | Size of the detected file containing PII. |
pii_count | Integer | Detected PII count | Number of PII items detected in the file. |
file_path | String | File path | Path of the detected file containing PII. |
pii_details | List | PII details | An array of objects containing key-value pairs: name, type, and count. Name includes types like Email, Mobile (Korea), etc. |
dept_path | String | Department path | e.g. Logpresso > Sales |