I'm looking for well known tools that will scan for any PII within a network. For example, I would like to be able to use a plug and play method, meaning I drive to a client, plug my laptop in, and scan for all sensitive material, such as SSN, Account numbers, medical records, etc. I believe I'm looking for a "portable" DLP system. Currently, I have come across, Find_SSN, Sensitive Number Finder (SENF), Spider, Identity Finder. Any thoughts? In addition, I've read about FTK toolkit and EnCase, but not quite sure if they would perform the way I'm hoping them to. Essentially, I would like these tools to perform similar to any VA tool, such as Nessus, LANguard, OpenVAS, etc., but scan for PII.
OpenDLP is a free and open source, agent- and agentless-based, centrally-managed, massively distributable data loss prevention tool released under the GPL. Given appropriate Windows, UNIX, MySQL, or MSSQL credentials, OpenDLP can simultaneously identify sensitive data at rest on hundreds or thousands of Microsoft Windows systems, UNIX systems, MySQL databases, or MSSQL databases from a centralized web application. OpenDLP has two components:
You may well be able to use Nessus for this. Nessus Compliance checks apparently have the ability to scan for strings inside windows files. I've not actually used that side of their compliance checks, but the general process of using nessus for credentialed checks works reasonably well, in my experience.