How to find credit card numbers in files using DataSecurity Plus

1. Download and install DataSecurity Plus.
2. Open the DataSecurity Plus web console.
3. Select Risk Analysis from the application drop-down.

4. Go to Configuration > Data Discovery Settings > Policy.
5. The Policy Settings window that opens will list the default data discovery policies.
6. Click the +Add Policy button at the top-right corner.

7. Name the policy and include an appropriate description.
8. Add rules to the policy by clicking +Add Rule above the table.
9. In the Add Rule to the Policy window that opens, select and add the below-listed rules:
   • Credit card - Amex
   • Credit card - Discover
   • Credit card - InstaPay
   • Credit card - Visa
   • Credit card - Union Pay
   • Credit card - MasterCard
10. Click Save.

A data discovery policy to discover credit card numbers will be created.

1. Go to Configuration > Data Sources > File Server.
2. Click + Add File Server at the top-right corner.

3. Choose the domain from the drop-down. If you want to configure a new domain, click Add New Domain, and follow the steps listed here.
4. Click the + symbol next to Select Server, and choose the desired file server. You can also enter a new server using the Enter Server Name textbox.
5. Under Select Objects to Monitor:

   a. To scan shares, click the Shares button, select the desired shares, and click Add Shares.

   b. To scan subfolders, enter the folder path in the Shared Path of the object textbox. Click Add.

6. Click Save.

1. Go to Configuration > Data Sources > SQL Server.
2. Click + Add SQL server.

3. Enter a Server Name.
4. Enter an Instance Name and a Port Number.
5. Choose the Authentication Type from the drop-down.
Note: When chosen, both SQL Server Authentication and Windows Authentication will use the credentials of the user whose details are requested below.
6. Provide the username and password based on the authentication type.

Tip for choosing the authentication type

• When choosing Windows Authentication, use a user account with domain admin credentials to ensure the product has sufficient permissions to collect logs.
• When choosing SQL Server Authentication, use a user account configured within the target SQL Server instance that at least has read permissions.
7. Click Save.
Note: Once SQL Server is configured successfully, data discovery scans will be scheduled automatically by DataSecurity Plus.