# On-demand scans are configured for sensitive information discovery
Items in SharePoint, OneDrive and on Devices are evaluated and classified when they're edited or touched.
Source: https://maester.dev/docs/tests/ZTA.35022
## Overview
Items in SharePoint, OneDrive and on Devices are evaluated and classified when they're edited or touched. If they aren't edited and they are in scope of a Microsoft Purview policy, they remain unclassified and invisible to Microsoft Purview policies. On-demand scans let you manually trigger evaluation of items across specified SharePoint, OneDrive, or Devices locations to discover and classify historical content. This can provide you with a more complete view of your information protection posture.
## Remediation
- [On-demand classification in Microsoft Purview](https://learn.microsoft.com/purview/on-demand-classification?wt.mc_id=zerotrustrecommendations_automation_content_cnl_csasci)
## Run it
The check runs as part of the whole assessment, with the ZeroTrustAssessment module installed:
```powershell
Install-Module ZeroTrustAssessment -Scope CurrentUser
Connect-Maester
Invoke-Maester -Pack ZTA -SkipBuiltIn
```
Leave out `-SkipBuiltIn` to run Maester's own checks in the same run.
About this check
| | |
| --- | --- |
| Severity | Medium |
| Effort to fix | Medium |
| Impact on users | Low |
| Pillar | Data, AI |
| Category | Information Protection |
| Product | [Purview](/docs/tests/products/purview) |
| Feature | Data classification |
| Area | Data protection |
| Licence | EXCHANGE_S_ENTERPRISE |
| Tenant | Workforce |
Product, feature, area and ATT&CK are Maester's: the assessment does not record them, so Maester keeps them in the pack's `taxonomy.json`.