Compliance violation detection

A system comprising:

• at least one processor;
• and
• a memory operatively connected with the at least one processor storing computer-executable instructions that, when executed by the at least one processor, causes the at least one processor to execute a method that comprises:
• evaluating network data to generate one or more groupings for the network data based on file type of the network data,
• applying data identification rules to identify at least one data schema from file data of the one or more groupings,
• determining one or more policy rules that apply to content of the at least one data schema,
• scanning at least one file from the file data of the one or more groupings to determine compliance with the one or more policy rules, and generating, for the at least one file scanned, a report of compliance with the one or more policy rules.

A method comprising:

• evaluating network data to generate one or more groupings for the network data based on file type of the network data;
• applying data identification rules to identify at least one data schema from file data of the one or more groupings, wherein the applying of the data identification rules further comprises:
• determining a position of the at least one schema in the file data of the one or more groupings, and
• generating a confidence score for identification of the at least one data schema based on pattern matching that evaluates content of the position using one or more signals;
• determining a policy rule that applies to content of the at least one data schema;
• and
• scanning, for the one or more groupings, a portion of the file data that corresponds with the position of the at least one data schema in order to determine existence of a violation of the policy rule.