Re: Identity Finder

[Ben Woelk <fbwis () RIT EDU>]

We're doing an Enterprise rollout at RIT. Our security engineer (Paul Lepkowski) should be able to answer any questions.

Ben Woelk '07
Information Security Communications and Training Specialist
Rochester Institute of Technology
Ross 10-A204
151 Lomb Memorial Drive
Rochester, New York 14623
585.475.4122
585.475.7920 fax
ben.woelk () rit edu<mailto:ben.woelk () rit edu>
http://security.rit.edu/dsd.html

Become a fan of RIT Information Security at http://rit.facebook.com/profile.php?id=6017464645

Follow us on Twitter: http://twitter.com/RIT_InfoSec

CONFIDENTIALITY NOTE:  The information transmitted, including attachments, is intended only for the person(s) or entity 
to which it is addressed and may contain confidential and/or privileged material.  Any review, retransmission, 
dissemination or other use of, or taking of any action in reliance upon this information by persons or entities other 
than the intended recipient is prohibited.  If you received this in error, please contact the sender and destroy any 
copies of this information.


________________________________
From: The EDUCAUSE Security Constituent Group Listserv [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Richard 
A MacLaughlin
Sent: Thursday, December 17, 2009 4:00 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Identity Finder

I am looking into products (or free utilities) that can scan for SSNs, credit card information, and anything else that 
would be considered sensitive.  Currently, we use Cornell Spider, but I'm looking for something more powerful and 
consistent.  It has been mentioned to me before to look into Identity Finder as a  potential solution and it looks 
promising, but I was wondering if any of you had any hands-on experience with Identity Finder or if you could recommend 
a better or different product?

I've contacted their sales department to give me some more information about specific questions I have, but I'll 
reiterate one question here in case any of you have hands-on experience.  It seems like the product is primarily geared 
toward Windows environments, so I'm wondering how successful (if at all) it is at finding any true positives when 
scanning file extensions that aren't native to Windows.  Of course, I'll reiterate that I'm definitely open-minded to 
other solutions beside Identity Finder if there is something better.

Thanks,

Richard A. MacLaughlin
Information Security
Valdosta State University
Phone:  (229) 333-5974