Dataflows Overview

A dataflow is Cyberhaven's representation of observed data handling, starting with the data's origin and following its subsequent movement between various people, devices, websites, applications, email attachments, and other mediums.

In the dataflow example below, Cyberhaven has observed that the user downloaded a document containing sensitive customer information from Sharepoint to their local workspace. The user then compressed this document, renamed it to "family_photos", changed the file type from .zip to .png, and then tried uploading it to their personal Dropbox account.

Clicking on each of the events that are part of this flow will display additional relevant information about that particular event, such as the full URL, file size, hash values, and more. Using its data tracing capabilities, Cyberhaven has followed and tracked the document even though it was manipulated, and had additional copies created. Applying the understanding of where the data came from as well as many other characteristics, Cyberhaven can logically group data using conditional filters and apply security policies to protect both the original source data and any copies or derivatives.