Content inspection match type
The Content inspection match type parameter determines how many defined patterns, keywords/keyphrases, or Microsoft sensitivity labels must be matched to generate a detection.
This parameter supports the following values:
- Match any: Generates a detection when any of the specified patterns, keywords/keyphrases, or sensitivity labels are found during inspection.
- Match at least 2/3/4/5: Generates a detection when at least 2,3,4, or 5 of the specified patterns, keywords/keyphrases, or sensitivity labels are found during inspection. Matches are counted across the content inspection methods for assets and custom values (that is, all specified patterns, keywords, and sensitivity labels), not each individual method.
- Match all: Generates a detection when all of the specified patterns, keywords/keyphrases, and sensitivity labels are found during inspection.
- Match none: Generates a detection when none of the specified patterns, keywords/keyphrases, and sensitivity labels are found during inspection.
|
For example, if a US Social Security Number (SSN) asset, US passport number asset, and a "Confidential" sensitivity label have been selected within a template with a match type of Match at least 2, at least two assets would need to be matched to generate a detection—such as a US SSN and a US passport number or a US SSN and a "Confidential" sensitivity label. When content inspection keyword list assets are used, the match type is applied at the asset level and not at the individual keyword level. For example, where a template is configured with five keyword list assets and a match type of Match at least 2, at least one keyword/keyphrase from two different assets must be matched to generate a detection. |
|
|
When content inspection keyword list assets are used, the match type is applied at the asset level and not at the individual keyword level. For example, where a template is configured with five keyword list assets and a match type of Match all, at least one keyword/keyphrase from each asset must be matched to generate a detection. |