External Storage

Using this feature, you can choose the storage destination for all the content captured by the Endpoint Sensor after inspection. If you have enabled features such as content attributes and record screenshots, then Cyberhaven creates a copy of the content and captures screenshots. The content is stored in a repository that you own and control.

Cyberhaven does not retain any copies of the data. Instead, you can access the captured content for each event from the Risks Overview page. The event details provide links to the captured content in the destination repository.

The platform differentiates between different content types that can be stored in buckets and it is possible to configure specific buckets for use in this instances

Generated Content

Generated content represents the results that Cyberhaven has created as as a result of performing analysis on content evaluated and sent to the content identification services from the various sensors deployed in the environment. This content can include information that relates to those objects and is used in various instances in the Cyberhaven platform when more detail is required to be seen. Read access to this content is required when the admins want to see elements like content reports in the UI.

Original Content

The original content represents the data objects themselves that have been either selected for capture or inspection and capture as a result of content inspection policies configured in the platform. These objects can be confidential or potentially harmful so the ability to separate them from the derived content have been provided. Should administrators want to support the content download option in any location in the UI then read access to these buckets will be required.

Details of the configuration and the access capabilities are included in the following configuration section