Identity Finder is often capable of detecting that "test data" or "sample data" does not contain real, sensitive data and therefore will not flag that information as matches. In order to determine if expected sensitive information is actually being missed, it is necessary to ensure that the locations containing that information is being searched. Before contacting support with concern that Identity Finder is missing expected matches, ensure that there are entries in the current Identity Finder client log that specify that the target location is being searched. If the location does not appear in the log or appears as a Location Skipped, it will be necessary to change the configuration settings to search the location.
Configuring the Search
To configure the application to ensure that the selected location is in fact being searched, perform the following steps:
- Ensure that the type of location is being searched:
- For Files and Compressed Files:
- Ensure that the Files ribbon button is selected (highlighted orange). If the target file is a compressed file, ensure that the Compressed Files ribbon button is selected (Windows) or that the, "Include Compressed Files" checkbox is checked on the File Types Preferences page (Mac).
- Ensure that an appropriate button in the File Locations ribbon group (Windows) or menu item on the Locations button (Mac) is selected such as My Computer or Custom Files. If Custom Files is selected, ensure that the folder containing the target file(s) is specified.
- Ensure that the target file type is part of the list of file types that are included in the search (Windows, Mac).
- For E-Mail Messages and Attachments:
- Ensure that the E-Mails ribbon button is selected (highlighted orange).
- Ensure that the target e-mail application (e.g., Outlook, Outlook Express, or Thunderbird) is included in the search.
- For Browser Data:
- Ensure that the Browsers ribbon button is selected (highlighted orange).
- Ensure that the target browser application (Internet Explorer or Firefox) is included in the search.
- For the Windows Registry:
- For Websites:
- For Databases:
- For Files and Compressed Files:
- Disable Performance settings that may cause the location to be skipped:
- If the location is a file, e-mail attachment, or web file, ensure that it is less than the value specified in the "Search only files less than X MB" setting.
- Disable "Limit display when the following number of Maximum Matches is reached" to display all of the results in each location.
- If the location is a file, e-mail attachment, or web file, disable "Search only the first X KB of each file" to search the entire location.
- If the location is a compressed file, disable "Search only compressed files less than X MB". to search all of the files in the compressed file.
- If the location is a file or an e-mail message, disable "Search only files and e-mails created or modified since: [date]" to search all locations regardless of their date.
- If the location is a file or an e-mail, disable "Use search history for files and e-mails" to ensure that all files and/or e-mails are searched during every search.
- Set appropriate AnyFind settings to locate the expected information:
- If the missing information is an Unformatted Social Security Number (a 9 digit number with no dashes or spaces), ensure that all options are configured to locate the missing number (Windows, Mac).
- If the missing information is a Social Security Number, there may be advanced settings, not available in the client user interface, that need additional configuration.
- If the missing information is a Credit Card Number, ensure that the specified type of that credit card is included as part of the search (Windows, Mac).
- If the missing information is another identity type, ensure that the settings for that type are set appropriately (Windows, Mac).
- Set up logging to record the necessary information:
Then run the search and view the current log. On Windows, the "View current log" option can be selected from the drop-down menu under the Logging ribbon button on the Configuration ribbon tab as shown in the Identity Finder Help topic Change the Options for Logging Identity Finder Activity. On Mac, view the Logging preferences page, note the log file location, open that folder in Finder, and then open the most recent file.
If the target location does not appear in the log, re-check the items in Step 1 above. If the target location appears as a Location Skipped, re-check the items in Step 2 above. If there is an error in the log, resolve the situation or search the Identity Finder knowledge base for additional information about the error.
If the target location appears as a Location Searched in the log and the expected results still do not appear, the next step is to ensure that the information is being extracted from the location. To do this, force Identity Finder to match a common character such as an "a" or a "1" by adding a Custom Type and then view the contents of the location in the Preview Pane (Windows, Mac).
When the location appears in the results, click on it to preview it and search for the expected information. If it does not appear, then it was not extracted and Identity Finder will therefore be unable to find it.
For more information on extraction issues, please refer to these articles:
- Missing results in Microsoft Office files
- Missing Credit Card Number (CCN) results in Microsoft Excel Spreadsheets
- Signed or encrypted Outlook messages are not searched
For sample/test data that will return results, please refer to this article:
For system administrators, there are additional AnyFind configuration settings that are not available via the Identity Finder Enterprise Client user interface. These settings are available in the enterprise console user interface and documented in the Settings Reference.
If the expected results still do not appear, contact Identity Finder Support by opening a ticket.