CaveloInstall

Summary

Search for Personally Identifiable Information (PII) data within your organization's scanned sources using configurable filters, classifications, and sorting options.

Inputs

• Quick Filters — Collection of boolean filters including High-Risk PII Only (SSN, Credit Card, Bank Account), Exclude Approved Locations, and Large Files Only (files larger than 1MB).
• PII Classifications — Multi-select list of PII types to search for, such as SSN, Credit Card, Email, Phone, Address, and others.
• Inventory Tags — Comma-separated list of inventory tags to include in the search filter.
• MSIP Labels — Comma-separated list of Microsoft Security Information Protection labels to filter by.
• Source Types — Multi-select list of source types to include in the search, e.g., Agent endpoints, Box Cloud, Office 365.
• Agent UUIDs — Comma-separated list of agent UUIDs to filter the search results by specific agents.
• Date Range — Predefined range options for filtering by PII discovery scan time, including last 24 hours, 7 days, 30 days, 90 days, or Custom.
• Custom Date Range — When Date Range is set to Custom, specify scanTimeAfter and scanTimeBefore datetime filters.
• Sort By — Option to sort the results by scan time, classification, file size, or confidence, each ascending or descending.
• Limit — Maximum number of results to return; 0 means no limit.

Output shape

a list of PII record items matching the search criteria

Each result item includes standard PII fields and adds computed properties such as daysSinceDiscovery (based on scanTime). Pagination is internally handled by the node to respect the limit parameter. Errors are returned per item if query fails.

Examples

Example 1: Find high-risk PII types discovered in the last 7 days from approved storage locations excluded

Set Quick Filters with High-Risk PII Only true, Exclude Approved Locations true; Date Range to Last 7 Days; Limit to 50; Sort By Scan Time descending

Example 2: Search emails and phone numbers from Office 365 and agents with specific agent UUIDs over the last 30 days

Select PII Classifications Email and Phone; set Source Types to Office 365 and Agent; provide Agent UUIDs as comma-separated list; Date Range Last 30 Days; Limit 100