PII or senstive data leaks

Hello,

I want to run a test on a web application to find any PIIs, sensitive data, or URLs leaks. What tools and how to do it? Does Burp’s Scrawl and Audit do the job? Thanks!

Regards,