Extracting Metadata from File

Products

• Data Loss Prevention Endpoint Prevent
• Data Loss Prevention Network Monitor
• Data Loss Prevention Network Prevent for Email
• Data Loss Prevention Network Protect
• Data Loss Prevention Endpoint Discover

Issue/Introduction

I would like to detect on the metadata on my file, but I do not know what metadata is available for detection.  How can I find out what metadata is available?

Environment

DLP

Resolution

It is possible to extract the metadata from a file just like our content extraction does. 

Note for Windows: Substitute C: for the drive letter where the DLP software is installed.

Note for Linux: If running the filter executable as the protect user, you may first need to login as root and grant permissions for the protect user to execute the binary. To do this, type: chmod u+x /<path to filter> (see below)

For Version 16.1

• • Windows (64-bit): C:\Program Files\Symantec\DataLossPrevention\KeyView\<KeyViewVersion>\Protect\plugins\contentextraction\Verity\x64\filter -m <filename> metadata.txt
  • Linux (64-bit): /opt/Symantec/DataLossPrevention/KeyView/<KeyViewVersion>/Protect/plugins/contentextraction/Verity/x86_64/filter -m <filename> metadata.txt

The metadata will be written to the file metadata.txt. This file can be viewed to see the content. 

To see additional help for filter.exe run the following command: filter.exe --help