---
id: 8156
title: "Identifying Payment Cards at Rest – Going Beyond the Key Word Search"
source_domain: netspi.com
source_url: "https://www.netspi.com/blog/technical-blog/vulnerability-management/identifying-payment-cards-at-rest-going-beyond-the-key-word-search/"
published_at: "2017-08-02T00:00:00Z"
tags: ["pci-dss", "database-security", "mssql", "data-discovery", "payment-cards", "luhn"]
phying_url: "https://phying.com/item/8156"
lang: en
---

# Identifying Payment Cards at Rest – Going Beyond the Key Word Search

## Summary

Uses MSSQL's native string functions to rule out tables and columns that cannot hold cardholder data, pairing card-number patterns and Luhn validation to cut the cost of cardholder data discovery.

## Intelligence Metadata

- **Sources:** netspi.com
- **Published:** 2017-08-02T00:00:00Z
- **Original:** https://www.netspi.com/blog/technical-blog/vulnerability-management/identifying-payment-cards-at-rest-going-beyond-the-key-word-search/
- **Phying News:** https://phying.com/item/8156