Regular expressions

Regular expressions, or regex, are a way to search for specific patterns in text. In PDLP, they help find and protect sensitive information. If you're looking for a specific pattern, you can introduce your own regex to define additional sensitive info. This section will introduce how regular expressions work in the PDLP. We'll go over each part step by step.

Enabling regular expression

Policies > Workflow rules > "Workflow name" > Proactive DLP > Check for regular expressions

• Name

  • The label or identifier for the regular expression pattern
  • Example: Bank Account Number

• Regex

  • The specific pattern or sequence you're trying to match in the text.
  • Example: \d{8,17}\b

• Default certainty

  • A confidence level assigned to matches of this regex pattern.
  • Example: High

• Keywords

  • Specific words or terms related to the regex pattern that might assist in its identification.
  • Example: Bank, Account Number, Bank Account Number, USA Bank

• Delimiter

  • Validates a match by checking the surrounding characters. Only match the exact standalone string.
  • Example: ;

• Exclude prefix

  • Characters or patterns to ignore directly before the regex match.
  • Example: Invalid-

• Exclude suffix

  • Characters or patterns to ignore directly after the regex match.
  • Example: -Invalid

• Exclude beginning characters

  • Applied to data that matches the Data identifier Pattern. If a hit starts with the given patterns, it will be excluded.
  • Example: {

• Exclude ending characters

  • Applied to data that matches the Data identifier Pattern. If a hit ends with the given patterns, it will be excluded.
  • Example: }

• Duplicate characters

  • Ensure that a string of digits are not all the same.

• Redact hits

  • Determines if matches should be redact or replaced with substitute characters.

• Allow if detections at or above threshold are redacted

  • It allows data to pass if the match is at or above the threshold.