Trellix DLP Discover supports four scan types — inventory, classification, remediation, and document registration.
Inventory scans
Use inventory scans to give you a high-level view of what types of files exist in the repository. This scan collects only metadata — the files are not fetched. Trellix DLP Discover sorts scanned metadata into different content types and analyzes attributes such as file size, location, and file extension. Use this scan to create an overview of your repository or for IT tasks such as locating infrequently used files. You can run inventory scans on all supported file repositories and databases.
Classification scans
Use classification scans to help you understand the data that exists in the targeted repository. By matching scanned content to classifications such as text patterns or dictionaries, you can analyze data patterns to create optimized remediation scans. You can run classification scans on all supported file repositories and databases.
Remediation scans
Use remediation scans to find data that is in violation of a policy. You can run remediation scans on all supported file repositories and databases.
For Box, File Server, and SharePoint scans you can monitor, apply a Rights Management policy, apply automatic classification, copy, move files to an export location, or remove automatic classifications. All actions can produce incidents that are reported to the DLP Incident Manager in ePO - On-prem. Box scans can also change an anonymous share to one requiring logon.
For database scans, you can monitor, report incidents, and store evidence.
Registration scans
Use document registration scans to extract content from files based on selected fingerprint criteria, and save the data to a signature database.
The registered documents can define classification and remediation scans, or policies for Trellix DLP Network Prevent and Trellix DLP Network Monitor. You can run document registration scans only on supported file repositories, not on databases. More than one document registration scan can potentially pick up a particular file. In that case, it is classified based on more than one set of criteria, and its signatures are recorded in more than one registered document.