# How to Make Endpoint Smart Screenshot Images Searchable in Unified Search

Canonical: https://www.nsecsoft.com/en/course/screenshot-search.html

Language: en-US

Updated: 2026-04-03T08:50:29Z

To use the "Intelligent Screenshot Text Retrieval by Unified Search" feature, please first contact technicians to install and deploy the OCR server\. The core value of this capability is that administrators do not have to read through Smart Screenshots one by one, but can directly enter keywords in Unified Search to quickly locate screenshot records \[…\]

To use the "Intelligent Screenshot Text Retrieval by Unified Search" feature, please first contact technicians to install and deploy the OCR server.

The core value of this capability is that administrators do not have to read through Smart Screenshots one by one, but can directly enter keywords in

**Unified Search**

to quickly locate screenshot records containing specified text. This is especially helpful for troubleshooting sensitive project codes, customer names, account information, financial fields or clues to illegal operations.

It should be noted that

**Aggregation Search**

's retrieval of Smart Screenshot text relies on the OCR service and

**Smart Analysis**

to take effect at the same time. In other words, just turning on

**Intelligent Screenshot**

cannot directly realize text retrieval; only when the OCR environment is available and

**Intelligent Analysis**

is enabled in the policy, the text content in the screenshot will be extracted and participated in the search.

#### **Policy setting steps**

1\. Click

**Data Security**

→

**Policy**

on the console to enter the data security policy settings page.

2\. Click

**Screen Security**

to enable the

**Smart Screenshot**

policy.

3\. Click

**Parameter Settings**

to enter the Smart Screenshot policy setting interface.Click

**Add**

to create/configure a Smart Screenshot policy.

4\. Enable

**Intelligent Analysis**

in the policy configuration and click

**OK**

to save.After confirming that the policy application endpoint is correct, click

**Apply**

to deliver the policy.

Effectiveness instructions

-   After the OCR service is deployed and "Smart Screenshot + Smart Analysis" is turned on, screenshots can be quickly searched by keywords in **Aggregation Search**.

#### **Verification methods and implementation suggestions**

It is recommended that the administrator open a page containing obvious keywords on the test endpoint, such as project number, customer name or fixed test text. After the screenshot is generated, use

**Unified Search**

to enter the same keywords for verification. If the corresponding screenshot can be retrieved, it usually means that OCR and

**Intelligent Analysis**

have taken effect normally.

-   If the search result is empty, you should first check whether the OCR service has been deployed and whether **Intelligent Analysis** is enabled in the screenshot policy.
-   In order to improve the search hit rate, it is recommended to give priority to a collection strategy with clear interface text, moderate font size, and stable screenshot quality.
-   For high-value positions, this ability can be used in conjunction with **Leak Tracking**, **File Operation**, and **Screenshot Audit** to further improve investigation efficiency.