Data Protection Files Analytics
Introduction
Files is an all in one SaaS data storage security analytics located in Data Protection > Files. All files of all cloud application on board can be accessed in Files.
When a cloud account is first added to FortiCASB, files resided in the cloud account are pulled into the Files page. Then FortiCASB automatically updates the file status in Files page when users attempt to access files through the cloud application account.
Files is also available in each of the cloud application except SAP IAS and Zoom.
The files bubble chart gives an overview of the files categorized by File Type, Data Analysis, Share Type, and SaaS App. (SaaS App bubble chart is only available in the all in one Files in Data Protection.)
File Type captures all file types regardless of readability within the scope of cloud account storage/bucket.
Click on each file type bubble to show files with the specific file type.
Data Analysis scans and captures all files that contains DLP (Data Loss Prevention) data. Each bubble represents different Data Analysis policy.
Click on each Data Analysis bubble to show files only pertain to that Data Analysis policy.
Share Type is a normalized share type that normalized all cloud account users by grouping them together by access permission. For more detail on normalized share type, please see Appendix B - Normalized Share Types.
Click on each share type to see only files shared by the specific share type users.
SaaS App filters all cloud application files by cloud platform.
Click on each app bubble to filter the files by app.
Sort Cloud App Files by Filter
There are 11 filters that files can be sorted to identify the targeted files among all cloud applications:
For more information on Highlight and Data Analysis Scan filters, please see:
Example on using Files Filter
This example filters through all files for Malwares detected in the last 90 days among all cloud applications.
- Click on +Add Filter.
- Select Created > Last 90 days.
- Click +Add Filter again.
- Select Data Analysis > AV Scan.
- Click Search sign and filter through all files.
- All Malwares from the last 90 days are displayed.
- Click on any one of malware to view basic details, activity, users exposed, and data pattern violation.
