Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 6 down vote favorite

I'm looking for well known tools that will scan for any PII within a network. For example, I would like to be able to use a plug and play method, meaning I drive to a client, plug my laptop in, and scan for all sensitive material, such as SSN, Account numbers, medical records, etc. I believe I'm looking for a "portable" DLP system. Currently, I have come across, Find_SSN, Sensitive Number Finder (SENF), Spider, Identity Finder. Any thoughts? In addition, I've read about FTK toolkit and EnCase, but not quite sure if they would perform the way I'm hoping them to. Essentially, I would like these tools to perform similar to any VA tool, such as Nessus, LANguard, OpenVAS, etc., but scan for PII.

share|improve this question
An "all in one" tool just for scanning for PII. I'm not asking for one tool for VA and PII. I don't see how this is "strange" when someone is contracted to scan for PII as part of the process to become compliant. For example, a VA tool would scan for all sorts of vulnerabilities across various software, I was checking to see if there was a PII scanning tool that could do the same. Scan different extensions for PII as a plug and play device. – Pentest Oct 27 '11 at 12:47

2 Answers

up vote 2 down vote accepted

Try http://code.google.com/p/opendlp/

OpenDLP is a free and open source, agent- and agentless-based, centrally-managed, massively distributable data loss prevention tool released under the GPL. Given appropriate Windows, UNIX, MySQL, or MSSQL credentials, OpenDLP can simultaneously identify sensitive data at rest on hundreds or thousands of Microsoft Windows systems, UNIX systems, MySQL databases, or MSSQL databases from a centralized web application. OpenDLP has two components:

share|improve this answer
Thank you everyone. Will give both Nessus compliance and OpenDLP a good look. – Pentest Oct 27 '11 at 16:31
up vote 2 down vote

You may well be able to use Nessus for this. Nessus Compliance checks apparently have the ability to scan for strings inside windows files. I've not actually used that side of their compliance checks, but the general process of using nessus for credentialed checks works reasonably well, in my experience.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.