User guide

iGuard/inSight User Guide

Release 7.0.0.4

12. Select Group by Detail from the dashboard header.

This will give you a graphical picture of the results.In this case, you can see that port 1 was used

instead of the expected port 25.

Find Data Leaked in the Past

If you suspect a document containing proprietary information has leaked at some time in the past,

you can use a historical search to find out if, when and where the information left your network.

You can do this by searching for keywords, or you can program a digest search to find one

particular document that you know contains the information.

Keyword Search

For example, you may want to locate the source of an Earnings Per Share leak by searching for the

exact projected amount, or you might search for the name of a specific document that contains that

information.

1. Go to Capture > Basic Search.

2. Use the default Keywords element.

3. Type in the name of the document, or a word or phrase that may be contained in the

document.