# Results

The Results page provides a comprehensive view of sensitive data detected across scanned endpoints, SharePoint sites, and email mailboxes. From this page, you can examine detailed findings, initiate investigations for closer inspection, perform remediation actions, and download reports.

Results are organised into three tabs based on where the sensitive data was found:

* Devices (workstations, laptops, file servers)
* SharePoint
* Email (Exchange Online mailboxes).

Navigate to **DISCOVER** > **Results**. By default, you'll see results from all completed scans. Use the filter options at the top of the page to narrow results by specific scan jobs, date ranges, data types, classifications, or target names.

<details>

<summary><strong>Devices</strong></summary>

For devices, you can view the scanned file details, including filename, file path, size, creation and modification dates, owner information, and operating system details. Detected data types and the number of hits are shown in a clickable format, allowing you to review sensitive content quickly. The classification of each file is displayed, and any remediation actions, such as move, copy, delete, or notifications, are tracked.

<figure><img src="/files/frGZ9aiiVbldRyhYYAoG" alt="" width="563"><figcaption></figcaption></figure>

1. Navigate to **DISCOVER** > **Results**.
2. Click on **Devices**.

<table><thead><tr><th width="167">Field Group</th><th width="161">Field</th><th>Description / Details</th></tr></thead><tbody><tr><td><strong>Device / Endpoint</strong></td><td>Device Name</td><td>Name of the device where the scanned file resides.</td></tr><tr><td><strong>Scan Details</strong></td><td>Date Scanned</td><td>Date when the scan was executed.</td></tr><tr><td><strong>File Details</strong></td><td>Filename</td><td>Name of the file containing sensitive data.</td></tr><tr><td></td><td>File Path</td><td>Full path of the file on the device.</td></tr><tr><td></td><td>File Size (BYTES)</td><td>Size of the file in bytes.</td></tr><tr><td></td><td>File Created</td><td>Timestamp when the file was created.</td></tr><tr><td></td><td>File Last Modified</td><td>Timestamp of the file’s last modification.</td></tr><tr><td><strong>Detection Results</strong></td><td>Data Type</td><td>Clickable list of sensitive data types detected in the file.</td></tr><tr><td></td><td>Number of Hits</td><td>Clickable count showing how many instances of each data type were found in the file. If the number of hits is below the configured upper limit, all results are displayed. If it exceeds the limit, only results up to the upper limit are shown.</td></tr><tr><td><strong>Classification &#x26; Security</strong></td><td>Classification</td><td>Clickable field showing which classification the file belongs to.</td></tr><tr><td><strong>Action / Remediation</strong></td><td>Action Taken</td><td>Status of any remediation actions applied to the file (move, copy, delete, notify file/device owner).</td></tr><tr><td><strong>Ownership &#x26; System Info</strong></td><td>Owner</td><td>Name of the file owner.</td></tr><tr><td></td><td>IP Address</td><td>IP address of the device where the file resides.</td></tr><tr><td></td><td>OS Version</td><td>Operating system version of the device.</td></tr></tbody></table>

</details>

<details>

<summary><strong>SharePoint</strong></summary>

For SharePoint, the Results page shows details of scanned documents, including the document name, library, path, site URL, owner, and size. Detected sensitive data types and the number of hits are clickable, providing additional details. Additionally, the status of any remediation actions performed is recorded.

<figure><img src="/files/w5TTwIgmSXMbftGMDMBp" alt="" width="563"><figcaption></figcaption></figure>

1. Navigate to **DISCOVER** > **Results**.
2. Click on **SharePoint**.

<table><thead><tr><th width="164">Field Group</th><th width="145">Field</th><th>Description / Details</th></tr></thead><tbody><tr><td><strong>Target / Site</strong></td><td>Target Name</td><td>Name of the SharePoint site or specific device/user where the scan was executed.</td></tr><tr><td><strong>Scan Details</strong></td><td>Scan Date</td><td>Date when the SharePoint scan was executed.</td></tr><tr><td><strong>File / Document Details</strong></td><td>File Name</td><td>Name of the document where sensitive data was found.</td></tr><tr><td></td><td>Path</td><td>Path of the document within SharePoint.</td></tr><tr><td></td><td>Site URL</td><td>URL of the SharePoint site.</td></tr><tr><td></td><td>Library</td><td>SharePoint library where the document resides.</td></tr><tr><td></td><td>Owner</td><td>Name of the document owner.</td></tr><tr><td></td><td>Size (in bytes)</td><td>Size of the document in bytes.</td></tr><tr><td><strong>Detection Results</strong></td><td>Data Types</td><td>Clickable list of sensitive data types detected in the document.</td></tr><tr><td></td><td>Number of Hits</td><td>Clickable count showing how many instances of each data type were found. If below the configured upper limit, all results are shown; if above, only results up to the upper limit are displayed.</td></tr><tr><td><strong>Classification &#x26; Security</strong></td><td>Classification</td><td>Clickable field showing the classification of the document.</td></tr><tr><td><strong>Action / Remediation</strong></td><td>Action Taken</td><td>Status of any remediation actions applied to the document (move, copy, delete, notify file/device owner).</td></tr></tbody></table>

</details>

<details>

<summary><strong>Email</strong></summary>

For email results, the page provides metadata for each scanned email, including sender, recipients (To, CC, BCC), subject, sent date, and mailbox folder. Detected sensitive data types, number of hits, and the specific location of the data (body, attachment, or subject) are clickable for detailed review. The classification of the email or its contents is shown, and the status of any remediation actions is tracked.

<figure><img src="/files/X5ynyqUgCIk8TJxM0kwi" alt="" width="563"><figcaption></figcaption></figure>

1. Navigate to **DISCOVER** > **Results**.
2. Click on **Email**.

<table><thead><tr><th width="153">Field Group</th><th width="154">Field</th><th>Description / Details</th></tr></thead><tbody><tr><td><strong>Target / Mailbox</strong></td><td>Target Name</td><td>Name of the device or user mailbox where the email resides.</td></tr><tr><td><strong>Scan Details</strong></td><td>Scan Date</td><td>Date when the email scan was executed.</td></tr><tr><td><strong>Email Metadata</strong></td><td>From</td><td>Sender of the email.</td></tr><tr><td></td><td>To</td><td>Primary recipients of the email. Clickable to view details.</td></tr><tr><td></td><td>CC</td><td>CC recipients. Clickable to view details.</td></tr><tr><td></td><td>BCC</td><td>BCC recipients. Clickable to view details.</td></tr><tr><td></td><td>Subject</td><td>Subject of the email.</td></tr><tr><td></td><td>Sent Date</td><td>Date the email was sent.</td></tr><tr><td></td><td>Folder</td><td>Mailbox folder containing the email.</td></tr><tr><td><strong>Detection Results</strong></td><td>Data Type</td><td>Clickable list of sensitive data types detected in the email.</td></tr><tr><td></td><td>Number of Hits</td><td>Clickable count showing instances of each data type found. Applies upper limit if configured.</td></tr><tr><td></td><td>Data Found In</td><td>Indicates where the sensitive data was detected (body, attachment, subject, etc.).</td></tr><tr><td><strong>Classification &#x26; Security</strong></td><td>Classification</td><td>Clickable field showing the classification of the email or its contents.</td></tr><tr><td><strong>Action / Remediation</strong></td><td>Action Taken</td><td>Status of any remediation actions applied to the email (move, copy, delete, notify file/device owner).</td></tr></tbody></table>

</details>

### Investigate

{% hint style="info" %}
You must create an investigation beforehand in **DISCOVER** > **Investigation**.&#x20;
{% endhint %}

Investigate allows users to download scanned files for closer inspection of sensitive information. Use this when you need to verify whether a scan configuration is producing accurate results, or when a sensitive file has appeared in an unexpected location and requires manual review.

![](/files/2ea0738c78e9bb5ffa3ae03e7fff4e4e4f85409f)

1. Navigate to **DISCOVER** > **Results**.
2. Select the entries you want to include in the investigation, and click **Investigate**.
3. Click select an existing investigation from the drop-down and add a **Comment** (optional).
4. Click **Investigate**. Selected files are downloaded as a password-protected ZIP file.

### Remediate

Remediate executes remediation actions (move, delete, or encrypt) on files identified during a scan or investigation. Unlike the **Remediation** section, which provides a status view of remediated files, this function performs the actual operational steps to secure, remove, or notify relevant parties about sensitive files.

![](/files/3b0fcb6edef3edf7c5c8d40f1095ca83327cff55)

1. Go to **DISCOVER** > **Results** > **Remediate** or **DISCOVER** > **Investigation** > **Remediate**
2. Select one or more files and click **Remediate**.
3. Choose a remediation action from the drop-down.

<table><thead><tr><th width="267">Action</th><th>Function</th></tr></thead><tbody><tr><td>Move</td><td>Relocates the file to a secure location.</td></tr><tr><td>Copy</td><td>Creates a copy of the file to a secure or alternate location.</td></tr><tr><td>Delete</td><td>Permanently removes the file.</td></tr><tr><td>Send email to Data Owner</td><td>Notifies the assigned data owner with an email.</td></tr><tr><td>Send email to End User</td><td>Notifies the file owner or user who has the device in their possession.</td></tr></tbody></table>

5. Add an optional comment to provide context or notes for the task.
6. Click **Remediate** to execute the selected action.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.guardware.com/discover/investigate-and-remediate/results.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.