Determining if a file was scanned in Cloud Workload Protection for Storage

Products

• Cloud Workload Protection for Storage

Issue/Introduction

You need to know if a file was scanned by Cloud Workload Protection for Storage (CWPS).

Environment

CWPS deployed on any of the following:

• Azure
• AWS

Resolution

Enable tagging in CWPS. This will cause CWPS to tag each object it scans with the verdict. You can then check the object tags. If it was not tagged, it was not scanned.

To enable tagging, see the following:

AWS: Tagging S3 Bucket Objects
Asure: Configuring Scan Tags for Azure Blobs