McAfee Data Loss Prevention 9.2.2 Product Guide

Using McAfee DLP MonitorSearching for email files or IP addresses 2Find images using file typesFind images by searching for file types used by graphics.Add a Thumbnail Match column to your dashboard to scan results quickly. Avoid timeouts caused byretrieving large image files by adding additional search terms.Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting | Advanced Search.• On your McAfee DLP appliance, select Capture | Advanced Search.2 Open the Content category.3 Select Content type | is any of and click ?.The Content Types pop‐up menu appears.4 Open the Image category.5 Select checkboxes of image file types.6 Click Apply.7 Click Search or Save as Rule.Find IP addresses in incidentsFind IP addresses in incidents by range, by subnet, or by exclusion.Tasks• Find IP addresses in captured data on page 61Find IP addresses, a range of addresses, or a subnet containing IP addresses in captureddata by using them in queries.• Find a range of IP addresses on page 62Find incidents generated from specific IP addresses by entering them into value fields.Define multiple addresses or address ranges by separating them with commas or dashes.• Find IP addresses on subnets on page 62Find subnetted IP addresses by using subnet masks in a query.• Exclude IP addresses from search results on page 63Exclude single IP addresses or IP address ranges from search results to focus your query.Find IP addresses in captured dataFind IP addresses, a range of addresses, or a subnet containing IP addresses in captured data byusing them in queries.Indicate a choice between two IP addresses by separating them with a comma (no spaces). You cansearch for single IP addresses, ranges, subnets, and addresses expressed in CIDR notation (seeexamples below).Task1 Select one of these options:• In ePolicy Orchestrator, select Menu | Data Loss Prevention | DLP Reporting.• On your McAfee DLP appliance, select Capture.McAfee Data Loss Prevention 9.2.2 Product Guide 61