How to Make Endpoint Smart Screenshot Images Searchable in Unified Search

To use the "Intelligent Screenshot Text Retrieval by Unified Search" feature, please first contact technicians to install and deploy the OCR server.

The core value of this capability is that administrators do not have to read through Smart Screenshots one by one, but can directly enter keywords in

Unified Search

to quickly locate screenshot records containing specified text. This is especially helpful for troubleshooting sensitive project codes, customer names, account information, financial fields or clues to illegal operations.

It should be noted that

Aggregation Search

's retrieval of Smart Screenshot text relies on the OCR service and

Smart Analysis

to take effect at the same time. In other words, just turning on

Intelligent Screenshot

cannot directly realize text retrieval; only when the OCR environment is available and

Intelligent Analysis

is enabled in the policy, the text content in the screenshot will be extracted and participated in the search.

Policy setting steps

1. Click

Data Security

→

Policy

on the console to enter the data security policy settings page.

2. Click

Screen Security

to enable the

Smart Screenshot

policy.

3. Click

Parameter Settings

to enter the Smart Screenshot policy setting interface.Click

Add

to create/configure a Smart Screenshot policy.

4. Enable

Intelligent Analysis

in the policy configuration and click

OK

to save.After confirming that the policy application endpoint is correct, click

Apply

to deliver the policy.

Effectiveness instructions

• After the OCR service is deployed and "Smart Screenshot + Smart Analysis" is turned on, screenshots can be quickly searched by keywords in Aggregation Search.

Verification methods and implementation suggestions

It is recommended that the administrator open a page containing obvious keywords on the test endpoint, such as project number, customer name or fixed test text. After the screenshot is generated, use

Unified Search

to enter the same keywords for verification. If the corresponding screenshot can be retrieved, it usually means that OCR and

Intelligent Analysis

have taken effect normally.

• If the search result is empty, you should first check whether the OCR service has been deployed and whether Intelligent Analysis is enabled in the screenshot policy.
• In order to improve the search hit rate, it is recommended to give priority to a collection strategy with clear interface text, moderate font size, and stable screenshot quality.
• For high-value positions, this ability can be used in conjunction with Leak Tracking, File Operation, and Screenshot Audit to further improve investigation efficiency.