Skip to main content

2-SQL_SensitiveDataScan Job

The 2-SQL_SensitiveDataScan Job discovers sensitive data in the database SQL server instances and databases based on a pre-defined or user defined search criteria.

Special Dependency

Though the job is visible within the console, it requires an additional installer package before data collection occurs.

Queries for the 2-SQL_SensitiveDataScan Job​

The SensitiveDataScan Job uses the SQL Data Collector for the following query:

Query Selection

  • SensitiveDataScan – Collects Sensitive Data from targeting instances

Configure the SensitiveDataScan Query​

The 2-SQL_SensitiveDataScan Job is preconfigured to run using the default settings for the Sensitive Data Collection category. Follow the steps to customize configurations.

Step 1 – Navigate to the Databases > 0.Collection > SQL > 2-SQL_SensitiveDataScan > Configure node and select Queries.

Step 2 – In the Query Selection view, select the SensitiveDataScan query click on Query Properties. The Query Properties window appears.

Step 3 – Select the Data Source tab, and click Configure. The SQL Data Collector Wizard opens.

CAUTION: Do not make changes to other wizard pages as they have been pre-configured for this job.

2sqlsensitivedatascanoptionspage

Step 4 – Select the desired scan options. Navigate to the SQL: Options page for additional information.

NOTE: The Sensitive Data Scan Settings are pre-configured for optimal performance for a high-level table scan. Configuring these settings to increase the scope of the sensitive data scan may significantly increase scan time.

Criteria Page

Step 5 – To modify criteria, navigate to the SQL: Criteria page. By default, the following System Criteria have been selected:

  • Credit Cards

  • Tax Forms

  • US SSN

  • User ID

  • Password

    Add or remove criteria if needed. See the Sensitive Data Criteria Editor topic for additional information.

Filter Page

Step 6 – To query for specific database/instance, navigate to the SQL: Filter page. The query is configured by default to target Only select database objects. Click Retrieve. The Available database objects box will populate. Databases and instances can be added in the following ways:

  • Select the desired database objects and click Add.
  • Use the Import CSV button to import a list from a CSV file, if desired.
  • Optionally use the Add Custom Filter button to create and apply a custom filter.

Step 7 – Navigate to the Summary page, click Finish to save any setting modifications or click Cancel if no changes were made. Then click OK to close the Query Properties window.

The 2-SQL_SensitsveDataScan Job is now ready to run with the customized settings.

Analysis Tasks for the 2-SQL_SensitiveDataScan Job​

Navigate to the Databases > 0.Collection > SQL > 2-SQL_SensitiveDataScan > Configure node and select Analysis to view the analysis task.

CAUTION: Do not modify or deselect the selected analysis task(s). The analysis task(s) are preconfigured for this job.

Analysis Selection

The default analysis task is:

  • SQL Server SDD Matches View — Brings the SQL Server SDD Matches View to the SA console
  • SQL Server SDD Match Hits View — Brings the SQL Server SDD Match Hits View to the SA console
  • AIC Import — Creates the SA_AIC_SddMatchesImport