NLP scripts

Predefined Policies and Classifiers | TRITON AP-DATA | Version 8.3.x

This section contains the full list of natural language processing scripts provided by Forcepoint. You can edit the classifiers as needed. For information, see Editing a predefined script.


Classifier	Description
10K Form	Detection of 10K forms.
10K Form (Non Standard Fiscal Year)	Detection of 10K forms for non standard fiscal years (not ending at 31/12).
10Q Form	Detection of 10Q forms.
10Q Form (Non Standard Fiscal Year)	Detection of 10Q forms for non standard fiscal years (not ending at 31/12).
1st Magnetic Track	Detection of the string encoded on the 1st magnetic track of a credit card, containing the card number, and personal information of the card holder.
1st Magnetic Track (Chinese cards)	Detection of the string encoded on the 1st magnetic track of a chinese credit card, containing the card number, and personal information of the card holder.
2nd Magnetic Track	Detection of the string encoded on the 2nd magnetic track of a credit card, containing the CCN, PIN, expiration date, and other card issuer data.
2nd Magnetic Track (Chinese cards)	Detection of the string encoded on the 2nd magnetic track of a chinese credit card, containing the CCN, PIN, expiration date, and other card issuer data.
3rd Magnetic Track	Detection of the string encoded on the 3rd magnetic track of a credit card, containing the CCN, PIN, and other card issuer data.
3rd Magnetic Track (Chinese cards)	Detection of the string encoded on the 3rd magnetic track of a Chinese credit card, containing the CCN, PIN, and other card issuer data.
9-Digit Slovak and Czech Birth Numbers	Detects valid 9-digit delimited or un-delimited Slovak and Czech birth numbers (Rodne Cislo). At least half of all 9-digit numbers need to be valid. For example "450819001".
10-Digit Slovak and Czech Birth Numbers	Detects valid 10-digit delimited or un-delimited Slovak and Czech birth numbers (Rodne Cislo). At least half of all 10-digit numbers need to be valid. For example "8501306605".
Aadhaar Number	Detection of Aadhaar 12 digit individual identification numbers.
ActionScript source code	Detection of source code content written in ActionScript, employing context-sensitive lexical analysis, patterns, and structures.
Australian Address	Detects Australian addresses. Uses several address formats such as number followed by a word and then a term that relates to a street (e.g., St., Rd., Ave.) For example: 12 Brigadoon St.
Australian Business Number (Default)	Detects Australian Business Numbers (ABN). Looks for 11-digit numbers that follow the ABN rules. If more than 3 valid ABNs are found, the classifier determines the percentage of valid ABNs to 11-digit numbers. If fewer than 4 valid ABNs are found, the classifier looks for ABN-related terms, such as 'ABN' or 'Australian Business Number', in proximity to the numbers found. For example: ABN: 12345678900
Australian Business Number (Wide)	Detects Australian Business Numbers (ABNs). Looks for 11-digit numbers that follow the ABN rules. For example: 12345678900. If one or more ABNs are found, the rule is triggered.
Australian Names (Default)	Detects full Australian names. Uses first-name and last-name dictionaries as well as internal dictionaries to identify valid full names. Weights case (John Smith vs. john smith) and honorifics (Dr., Mr., Mrs.). Uses a moderate threshold to signify a match. For example, using the default classifier, 'John Smith', 'john Smith', and 'dr. john smith' trigger the rule, but 'john smith' does not. Use the 'Default' classifier to balance between false positives and false negatives.
Australian Names (Narrow)	Detects full Australian names. Uses first-name and last-name dictionaries as well as internal dictionaries to identify valid full names. Weights case (John Smith vs. john smith) and honorifics (Dr., Mr., Mrs.). Uses a high threshold to signify a match. For example, using the narrow classifier, only 'John Smith' triggers the rule. 'john Smith', 'dr. john smith', and 'john smith' do not. Use the 'Narrow' classifier to reduce the false positives.
Australian Names (Wide)	Detects full Australian names. Uses first-name and last-name dictionaries as well as internal dictionaries to identify valid full names. Weights case (John Smith vs. john smith) and honorifics (Dr., Mr., Mrs.). Uses a low threshold to signify a match. For example, using the wide classifier, all permutations of 'John Smith' trigger the rule, including 'john Smith', 'dr. john smith', and 'john smith'. Use the 'Wide' classifier to reduce the false negatives.
Australian TFN	Detection of an Australian Tax File (TFN) numbers.
Belgium: ID Card Number	Detection of validated Belgium ID Card numbers
Brazil: RG Numbers (Default)	Detection of RG (Registro Geral) numbers.
Brazil: RG Numbers (Narrow)	Detection of RG (Registro Geral) numbers when appearing with support terms.
Brazilian CPF Number	Detection of validated Brazil CPF numbers.
Brazilian Name	Detection of Brazilian full names.
CAD stl text format	Detection of CAD stl text files
CAD stp text format	Detection of CAD stp text files
CAD x_t text format	Detection of CAD x_t text files
Canadian Names (Default)	Detection of Canadian full names.
Canadian Names (Wide)	Detection of Canadian full names.
CCN - for printer agent	Detection of valid credit card numbers, employing context sensitive lexical analysis and statistical analysis of patterns, taking into account possible errors that may be induced by the OCR software.
CDR	Detection of Call Detail Records with information like source phone number, destination phone number, call date, duration, etc.
CDR: headers	Detection of Call Detail Records by looking for column headers related to information such as source phone number, destination phone number, call date, duration, etc.
Chinese Credit Cards (Default)	Detection of credit card numbers used in the Peoples Republic of China employing various heuristics involving credit card-related terms and use of delimiters. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Chinese Credit Cards (Narrow)	Detection of credit card numbers used in the Peoples Republic of China. Requires additional evidence, such as credit card related terms in proximity, in order to qualify number as a credit card number. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Chinese Credit Cards (Wide)	Detection of potential credit card numbers used in the Peoples Republic of China, based only on format and validation. This classifier may cause false-positives. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Chinese Surnames	Detection of common Hong Kong surnames.
Confidential Header/Footer with Expiration Date	Detection of documents with confidential data in the header or footer that includes an American-formatted date (MM-DD-YYYY).
Contract Reference of Secretaria de Seguridad Publica (SSP)	Detection of Contract Nomenclature of Secretaria de Seguridad Publica (SSP).
Count attachments	Used to count the number of attachments and/or recipients.
Credit Card Magnetic Tracks	Detection of the strings encoded on 1st. 2nd and 3rd magnetic tracks of a credit card.
Credit Cards - Wide Minus Default	Detection of potential credit card numbers, based only on format and validation, may cause false-positives. Detects all CCNs that belong to 'wide' sensitivity and not to 'default'. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Credit Cards (Default)	Detection of credit card numbers employing various heuristics involving credit card related terms and use of delimiters. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Credit Cards (Extra-Wide)	Detection of potential credit-card-numbers, based only on format and validation.
Credit Cards (Narrow)	Detection of credit card numbers. Requires additional evidence, such as credit card related terms in proximity, in order to qualify number as a credit card number. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Credit Cards (Wide)	Detection of potential credit card numbers, based only on format and validation, may cause false-positives. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Credit Cards Pattern	Detection of potential credit card number patterns based only on format (without validation).
Credit Cards: American Express	Detection of valid American Express credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Bankcard	Detection of valid Bankcard credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Diners	Detection of valid Diners credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Discover	Detection of valid Discover credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Enroute	Detection of valid Enroute credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Isracard	Detection of valid Isracard credit card numbers, when appearing together with an Isracard related term in English or Hebrew. By default, only the last 4 digits are shown in the reports.
Credit Cards: JCB 1sr	Detection of valid JCB credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: JCB 2nd	Detection of valid JCB credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Maestro, Switch or Solo	Detection of valid Maestro, Switch or Solo credit card numbers employing various heuristics involving credit card related terms in English and Russian, and use of delimiters.
Credit Cards: Master Card	Detection of valid MasterCard credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: RuPay	Detection of valid Rupay dedit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: User-Defined IINs (Wide)	Detects potential credit card numbers, based only on format and validation. A list of allowed Issuer Identification Numbers (IIN) is read from the file CCN_IIN_Valid.csv, and a list of unallowed credit card numbers is read from the file CCN_Exceptions.csv. You can edit both files in the /policies_store/policies/scripts/ directory where TRITON AP-DATA is installed. Deploy your settings in the Data Security manager to apply your changes. This classifier may cause false positives.
Credit Cards: User-Defined IINs (Default)	Detects valid credit card numbers employing various heuristics involving credit-card-related terms and use of delimiters. A list of allowed Issuer Identification Numbers (IIN) is read from the file CCN_IIN_Valid.csv, and a list of unallowed credit card numbers is read from the file CCN_Exceptions.csv. You can edit both files in the /policies_store/policies/scripts/ directory where TRITON AP-DATA is installed. Deploy your settings in the Data Security manager to apply your changes.
Credit Cards: User-Defined IINs (Narrow)	A restricted detection of credit card numbers, tuned to minimize false positives. This rule requires additional evidence, such as credit-card-related terms in proximity, in order to qualify a number as a credit card number. A list of allowed Issuer Identification Numbers (IIN) is read from the file CCN_IIN_Valid.csv, and a list of unallowed credit card numbers is read from the file CCN_Exceptions.csv. You can edit both files in the /policies_store/policies/scripts/ directory where TRITON AP-DATA is installed. Deploy your settings in the Data Security manager to apply your changes.
Credit Cards: Visa	Detection of valid Visa credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Visa with 13 digits	Detection of valid 13 digit Visa credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Croatian Personal identification number (Wide)	Detects valid 11-digit Personal identification numbers. For example "92103795594".
Croatian Personal identification number (Default)	Detects valid 11-digit Personal identification numbers. At least 70% of the 11-digit numbers in the text need to be valid. For example "92103795594".
Croatian Personal identification number Near Term	Detects valid 11-digit Personal identification numbers near a support term. For example "Osobni identifikacijski broj 92103795594".
Cumulative HTTP number of Posts	Determines how many posts should exist before they are considered suspicious. This will only work on HTTP channel.
Cumulative HTTP number of Posts - Categorized URLs	Determines how many posts should exist before they are considered suspicious. This will only work on HTTP channel. Thresholds are configured for posting to categorized URLs.
Cumulative HTTP number of Posts - Uncategorized URLs	Determines how many posts should exist before they are considered suspicious. This will only work on HTTP channel. Thresholds are configured for posting to uncategorized URLs.
Cumulative HTTP Post Size	Determines which posts (according to size) will be counted. This will only work on HTTP channel.
Cumulative HTTP Post Size - Categorized URLs	Determines which posts (according to size) will be counted. This will only work on HTTP channel. Thresholds are configured for posting to categorized URLs.
Cumulative HTTP Post Size - Uncategorized URLs	Determines which posts (according to size) will be counted. This will only work on HTTP channel. Thresholds are configured for posting to uncategorized URLs.
CUSIP Numbers	Detection of validated CUSIP numbers.
CV in Chinese (default)	Detection of Curriculum Vitae (CV) in Chinese, using location sensitive lexical analysis of terms and patterns common in such documents. Default version.
CV in Chinese (narrow)	Detection of Curriculum Vitae (CV) in Chinese, using location sensitive lexical analysis of terms and patterns common in such documents. Narrow version.
CV in Chinese (wide)	Detection of Curriculum Vitae (CV) in Chinese, using location sensitive lexical analysis of terms and patterns common in such documents. Wide version.
CV in English (new in	Detection of Curriculum Vitae (CV) in English, using location sensitive lexical analysis of terms and patterns common in such documents.
CV in Russian or Ukraine	Detection of Curriculum Vitae (CV) in Russian or Ukrainian, using location sensitive lexical analysis of terms and patterns common in such documents.
Cyrillic User-Defined Weighted Dictionary (non-unique)	Detection of weighted Cyrillic keywords, where each term is counted according to the number of appearances. The terms and weights are supplied from an external file ('weighted_sections_Cyrillic_dictionary_unique.txt'), each dictionary in a separate section. In order to use it, insert your terms according to the example, and rename the section name in the script classifier parameter. Consider terms unique appearances. Adding wildcard ('*') in the beginning/end of the term, allow detecting regardless of the suffix/prefix - (up to 8 Cyrillic characters).
Cyrillic User-Defined Weighted Dictionary (non-unique) with EP Encryption	Detection of weighted Cyrillic keywords, where each term is counted according to the number of appearances. The terms and weights are supplied from an external file ('weighted_sections_Cyrillic_dictionary_unique.txt'), each dictionary in a separate section. In order to use it, insert your terms according to the example, and rename the section name in the script classifier parameter. Consider terms unique appearances. Adding wildcard ('*') in the beginning/end of the term, allow detecting regardless of the suffix/prefix - (up to 8 Cyrillic characters).
Cyrillic User-Defined Weighted Dictionary (unique)	Detection of weighted Cyrillic keywords, where each term is counted only once. The terms and weights are supplied from an external file ('weighted_sections_Cyrillic_dictionary_unique.txt'), each dictionary in a separate section. In order to use it, insert your terms according to the example, and rename the section name in the script classifier parameter. Consider terms unique appearances. Adding wildcard ('*') in the beginning/end of the term, allow detecting regardless of the suffix/prefix - (up to 8 Cyrillic characters).
Cyrillic User-Defined Weighted Dictionary (unique) with EP Encryption	Detection of weighted Cyrillic keywords, where each term is counted only once. The terms and weights are supplied from an external file ('weighted_sections_Cyrillic_dictionary_unique.txt'), each dictionary in a separate section. In order to use it, insert your terms according to the example, and rename the section name in the script classifier parameter. Consider terms unique appearances. Adding wildcard ('*') in the beginning/end of the term, allow detecting regardless of the suffix/prefix - (up to 8 Cyrillic characters).
Danish Account Numbers (Default)	Detection of Danish bank account numbers, when found in proximity to bank account related terms.
Danish Account Numbers (Narrow)	Detection of strictly formatted Danish bank account numbers, when found in proximity to bank account related terms.
Danish Account Numbers (Wide)	Detection of Danish bank account numbers.
Date Of Birth	Detection of dates of birth.
Date Of Birth (ages 10-90)	Detection of dates of birth for ages in the range 10-90 without support terms.
Date Of Birth (ages 20-65)	Detection of dates of birth for ages in the range 20-65 without support terms.
Denmark: CPR Number (Default)	Detection of at least 5 CPR numbers, or at least 1 CPR with term such as "CPR".
Denmark: CPR Number (Narrow)	Detection of at least 1 Danish CC number with a term or at least 10 without terms.
Denmark: CPR Number (Wide)	Detection of CPR numbers.
Dictionary Phrase in Header/Footer	Detection of user-defined, case-insensitive dictionary phrases in the header or footer of documents. For example, the dictionary phrase "secret" will be found on the text "TOP SECRET" but not in "Secretive and highly classified".
Document to Self (Default)	Detection of people sending documents to their personal email address.
Document to Self (Wide)	Loose detection of people sending documents to their personal email address.
Driver License: District of Colombia	Detection of valid District of Colombia driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Indiana	Detection of valid Indiana driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Iowa	Detection of valid Iowa driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Japan	Detection of Japanese Driver's License Number in proximity to driver license related terms. The terms and digits are detected in both English and Japanese.
Driver License: Massachusetts	Detection of valid Massachusetts driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Missouri	Detection of valid Missouri driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Nevada	Detection of valid Nevada driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Utah	Detection of valid Utah driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Virginia	Detection of valid Virginia driver license number, in proximity to driver license terms, including typos and misspellings.
EAR - Chemical Data Detection (Default)	Detection of chemical formulas and information related to composite materials.
EAR - Chemical Data Detection (Narrow)	Detection of chemical formulas and information related to composite materials. Requires high rate of evidence.
EAR - Chemical Data Detection (Wide)	Detection of chemical formulas and information related to composite materials. May cause false positives.
EIN (Default)	Detection of Employer ID Number (EIN).
Email Addresses	Detection of email addresses.
Email Addresses Domains	Detection of email addresses with different domains.
Email to Competitors	Detection of email sent to competitors. The competitors' domain names are supplied as a case-insensitive parameter. In order to use it, insert domain names into the parameter, separated by a semicolon.
Email Similarity	Detection of similar names in the source and destination of email addresses. Should be used with an AND condition together with the relevant type of sensitive information.
Encrypted Files - Unknown Format	Detection of encrypted files (unknown format) according to internal file properties.
Encrypted Files - Unknown Format (Wide)	Detection of encrypted files (unknown format) according to internal file properties (Wide)
EU Credit Cards	Detection of valid credit card number prevalent in Europe, employing various heuristics involving credit card related terms and use of delimiters.
Expiration Dates: Date After	Return 'True' if the current date is after the date specified in the classifier parameters. Can be used to construct a rule that is valid since a certain date, default expiration date is 31/12/2000. For example, you can set a keyword classifier to be "Code Yellow", and use it in an 'and' relation with the 'Date After' classifier.
Expiration Dates: Date Before	Return 'True' if the current date is before the date specified in the classifier parameters. Can be used to construct a rule that is valid after a certain date, default date is 31/12/2020. For example, you can set a keyword classifier to be "Code Yellow", and use it in an 'and' relation with the 'Date Before' classifier.
F# Source Code (By Content)	Detection of F# source code by content.
Finnish SSN (Default)	Detection of Finnish validated Social Security Numbers, when found in proximity to related terms.
Finnish SSN (Wide)	Detection of Finnish validated Social Security Numbers.
France INSEE Number	Detection of valid INSEE (NIR) numbers, validated with or without check digits.
French Names	Detection of French full names.
German Names	Detection of German full names.
Greece: AFM number (Default)	Detection of at least one Greek AFM number with a term in proximity, or several AFM numbers with statistical validation.
Greece: AFM number (Wide)	Detection of Greek AFM number with no term approvement or statistical validation.
Greece: Greek ID number	Detection of Greek ID number.
Greece: Greek Name (Default)	Detection of Greek full name (default behavior).
Greece: Greek Name (Wide)	Detection of Greek full name (wide behavior).
Hong Kong: Address (default)	Detection of Hong Kong address (default behavior).
Hong Kong: Address (narrow)	Detection of Hong Kong address, tuned to minimize false positives (may cause false negatives).
Hong Kong: Address (wide)	Detection of Hong Kong address, with possible false positives.
Hong Kong: ID - formal	Detection of Hong Kong ID of the form A123456(7).
Hong Kong: ID - non formal	Detection of Hong Kong ID of the form A1234567, without requiring ID terms.
.htpasswd file that uses bcrypt, MD5, or SHA-1 hash function (Default).	Detection of .htpasswd file that use the bcrypt, MD5, SHA-1, or salted SHA-1 hash functions. All lines in the file should be valid hash lines. Characters statistical analysis is used in order to prevent unintended matches. An example for a bcrypt line is "admin:$2y$14$mhtB34wX83QuzRhTu.4fqu.75XpELvXXaC.bCbYzbugMw2H/RyTcu".
.htpasswd file that uses bcrypt, MD5, or SHA-1 hash function (Narrow)	Detection of .htpasswd file that use the bcrypt, MD5, SHA-1, or salted SHA-1 hash functions. All lines in the file should be valid hash lines. At least 4 lines are needed in order to have a match. Characters statistical analysis is used in order to prevent unintended matches. An example for a bcrypt line is "admin:$2y$14$mhtB34wX83QuzRhTu.4fqu.75XpELvXXaC.bCbYzbugMw2H/RyTcu".
.htpasswd file that uses bcrypt, MD5, or SHA-1 hash function (Wide)	Detection of .htpasswd file that use the bcrypt, MD5, SHA-1, or salted SHA-1 hash functions (e.g., "admin:$2y$14$mhtB34wX83QuzRhTu.4fqu.75XpELvXXaC.bCbYzbugMw2H/RyTcu").
.htpasswd file that uses the crypt hash function (Default)	Detection of .htpasswd file that use the crypt hash function. All lines in the file should be valid hash lines. At least 4 lines are needed in order to have a match. Characters statistical analysis is used in order to prevent unintended matches. An example for a crypt line is "admin:uBbBQTqv1Kx9M".
.htpasswd file that uses the crypt hash function (Narrow)	Detection of .htpasswd file that use the bcrypt, MD5, SHA-1 or salted SHA-1 hash functions. All lines in the file should be valid hash lines. At least 8 lines are needed in order to have a match. Characters statistical analysis is used in order to prevent unintended matches. An example for a crypt line is "admin:uBbBQTqv1Kx9M".
.htpasswd file that uses the crypt hash function (Wide)	Detection of .htpasswd file that use the crypt hash function. At least 3 lines are needed in order to have a match. An example for a crypt line is "admin:uBbBQTqv1Kx9M".
Hungary CNP	Detection of Hungary validated Personal Numeric Code Numbers when found in proximity to related terms.
Hungary CNP (Wide)	Detection of Hungary validated Personal Numeric Code Numbers.
Hungary SSN	Detection of Hungary Social Security Numbers, when found in proximity to related terms
Hungary SSN (Wide)	Detection of Hungary validated Social Security Numbers.
Hungary Tax ID	Detection of Hungary validated Tax ID Numbers when found in proximity to related terms.
Hungary Tax ID (Wide)	Detection of Hungary validated Tax ID Numbers.
IBAN Austria	Detection of Austrian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Austrian IBAN format.
IBAN Austria (Wide)	Detection of Austrian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Belgium	Detection of Belgian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Belgian IBAN format.
IBAN Belgium (Wide)	Detection of Belgian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Brazil	Detection of Brazilian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Brazilian IBAN format.
IBAN Brazil (Wide)	Detection of Brazilian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Czech Republic	Detection of Czech IBANs (International Bank Account Numbers). Searches for support terms in proximity to Czech IBAN format.
IBAN Czech Republic (Wide)	Detection of Czech IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Denmark	Detection of Danish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Danish IBAN format.
IBAN Denmark (Wide)	Detection of Danish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Estonia	Detection of Estonian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Estonian IBAN format.
IBAN Estonia (Wide)	Detection of Estonian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Finland	Detection of Finnish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Finnish IBAN format.
IBAN Finland (Wide)	Detection of Finnish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN France	Detection of French IBANs (International Bank Account Numbers). Searches for support terms in proximity to French IBAN format.
IBAN France (Wide)	Detection of French IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN General	Detection of general IBAN numbers.
IBAN Germany	Detection of German IBANs (International Bank Account Numbers). Searches for support terms in proximity to German IBAN format.
IBAN Germany (Wide)	Detection of German IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Greece	Detection of Greek IBANs (International Bank Account Numbers). Searches for support terms in proximity to Greek IBAN format.
IBAN Greece (Wide)	Detection of Greek IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Hungary	Detection of Hungarian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Hungarian IBAN format.
IBAN Hungary (Wide)	Detection of Hungarian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Iceland	Detection of Icelandic IBANs (International Bank Account Numbers). Searches for support terms in proximity to Icelandic IBAN format.
IBAN Iceland (Wide)	Detection of Icelandic IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Ireland	Detection of Irish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Irish IBAN format.
IBAN Ireland (Wide)	Detection of Irish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Italy	Detection of Italian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Italian IBAN format.
IBAN Italy (Wide)	Detection of Italian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Kazakhstan	Detection of Kazakh IBANs (International Bank Account Numbers). Searches for support terms in proximity to Kazakh IBAN format.
IBAN Kazakhstan (Wide)	Detection of Kazakh IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Luxembourg	Detection of Luxembourgian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Luxembourgian IBAN format.
IBAN Luxembourg (Wide)	Detection of Luxembourgian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Netherlands	Detection of Netherlands IBANs (International Bank Account Numbers). Searches for support terms in proximity to Netherlands IBAN format.
IBAN Netherlands (Wide)	Detection of Netherlands IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Norway	Detection of Norwegian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Norwegian IBAN format.
IBAN Norway (Wide)	Detection of Norwegian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Poland	Detection of Polish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Polish IBAN format.
IBAN Poland (Wide)	Detection of Polish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Qatar	Detection of Qatari IBANs (International Bank Account Numbers). Searches for support terms in proximity to Qatari IBAN format.
IBAN Qatar (Wide)	Detection of Qatari IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Romania	Detection of Romanian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Romanian IBAN format.
IBAN Romania (Wide)	Detection of Romanian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Saudi Arabia	Detection of Saudi Arabia IBANs (International Bank Account Numbers). Searches for support terms in proximity to Irish IBAN format.
IBAN Saudi Arabia (Wide)	Detection of Saudi Arabia IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Slovakia	Detection of Slovak IBANs (International Bank Account Numbers). Searches for support terms in proximity to Slovak IBAN format.
IBAN Slovakia (Wide)	Detection of Slovak IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Spain	Detection of Spanish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Spanish IBAN format.
IBAN Spain (wide)	Detection of Spanish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Sweden	Detection of Swedish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Swedish IBAN format.
IBAN Sweden (Wide)	Detection of Swedish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Switzerland	Detection of Swiss IBANs (International Bank Account Numbers). Searches for support terms in proximity to Swiss IBAN format.
IBAN Switzerland (Wide)	Detection of Swiss IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Turkey	Detection of Turkish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Turkish IBAN format.
IBAN Turkey (Wide)	Detection of Turkish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN UK	Detection of UK IBANs (International Bank Account Numbers). Searches for support terms in proximity to UK IBAN format.
IBAN UK (Wide)	Detection of UK IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN United Arab Emirates	Detection of Emirati IBANs (International Bank Account Numbers). Searches for support terms in proximity to Emirati IBAN format.
IBAN United Arab Emirates (Wide)	Detection of Emirati IBANs (International Bank Account Numbers) without support terms in proximity.
ICD10 Codes	Detection of codes that belong to the ICD10 system. No additional information is required.
ICD10 English Descriptions	Detection of English descriptions of medical conditions as they appear in the ICD10 manual.
ICD10 Norwegian Descriptions	Detection of Norwegian descriptions of medical conditions as they appear in the ICD10 manual.
Icelandic Kennitala of Individuals (Default)	Detection of Icelandic identification numbers (kennitala) of individuals, employing various heuristics involving kennitala-related terms and other features unique to this number.
Icelandic Kennitala of Individuals (Wide)	Detection of Icelandic identification numbers (kennitala) of individuals, employing various heuristics involving features unique to this number.
IL bank accounts: Benleumi	Detection of validated BenLeumi account numbers in proximity to terms related to accounts in English or Hebrew.
IL bank accounts: Discount	Detection of validated Discount account numbers in proximity to terms related to accounts in English or Hebrew.
IL bank accounts: Hadoar	Detection of validated HaDoar account numbers, when appearing with terms relating to accounts in English or Hebrew.
IL bank accounts: Leumi	Detection of validated Leumi account numbers which include branch numbers, when appearing with terms relating to accounts in English or Hebrew.
IL bank accounts: Leumi no support	Detection of validated Leumi account numbers which include branch numbers.
IL bank accounts: Mizrahi	Detection of validated Mizrahi account numbers which include branch numbers, when appearing with terms relating to accounts in English or Hebrew.
IL bank accounts: Poalim	Detection of validated Poalim account numbers which include branch numbers, when appearing with terms relating to accounts in English or Hebrew.
IL Life Insurance	Detection of Israeli life insurance numbers.
IMEI (Default)	Detection of at least two validated IMEI numbers, delimited and non-delimited. Also locates IMEI related term somewhere in the document.
IMEI (Wide)	Detection of at least two validated IMEI numbers, delimited and non-delimited.
India: Form 16	Detection of India Form 16 that has been filled out, using identification of textual patterns common to such forms.
Indian Names (Default)	Detection of Indian full names.
Indian Names (Narrow)	Detection of Indian full names (Narrow).
Indian Names (Wide)	Detection of Indian full names (Wide). This content classifier should be used in conjunction with additional data as it is permissive.
Indonesian Single Identity Numbers (Default)	Detects valid 16-digit delimited or un-delimited Indonesian Single Identity Numbers (Nomor Induk Kependudukan). At least half of all 16-digit numbers need to be valid. For example "3313034604790001".
Indonesian Single Identity Numbers (Narrow)	Detects valid 16-digit delimited or un-delimited Indonesian Single Identity Numbers (Nomor Induk Kependudukan) where the last 4 digits are under 0400. At least half of all 16-digit numbers need to be valid. For example "3313034604790001".
Indonesian Single Identity Numbers Near Term	Detects valid 16-digit delimited or un-delimited Indonesian Single Identity Numbers (Nomor Induk Kependudukan) near a support term in English or in Indonesian. For example "nomor KTP 3313034604790001".
Ireland PRSI/PPS	Detection of Irish Personal Public Service numbers.
ISIN: Default	Detection of valid International Securities Identification Numbers (ISINs).
ISIN: with country code validation	Detection of valid International Securities Identification Numbers (ISINs), with validating country code.
Israel: General Medical Info	Detection of medical conditions in Hebrew or English.
Israel: Sensitive Medical Info	Detection of medical conditions of sensitive nature in Hebrew or English.
Israeli Credit Cards	Detection of valid credit card number prevalent in Israel.
Israeli Credit Cards (Default)	Detection of Israeli credit card numbers (not including Isracard) employing various heuristics involving credit card related terms and use of delimiters. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Israeli Credit Cards (Narrow)	Detection of Israeli credit card numbers (not including Isracard). Requires additional evidence, such as credit card related terms in proximity, in order to qualify number as a credit card number. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Israeli Credit Cards (Wide)	Detection of potential Israeli credit card numbers (not including Isracard), based only on format and validation, may cause false positives. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Israeli IBAN	Detection of Israeli IBANs (International Bank Account Numbers). Searches for support terms in proximity to Israeli IBAN format.
Israeli IBAN (Wide)	Detection of Israeli IBANs (International Bank Account Numbers) without support terms in proximity.
Israeli Identity Number (Default)	Detects valid 9-digit Israeli identity numbers. At least 50% of the 9-digit numbers in the text need to be valid. For example: "064810948".
Israeli Identity Number Near Term	Detects valid 9-digit Israeli identity numbers near a support term in Hebrew, Arabic, or English. For example: "Teudat Zehut 064810948".
Israeli Identity Number (Wide)	Detects valid 9-digit Israeli identity numbers. For example: "064810948".
Israeli Identity Number - 7-Digits (Default)	Detects valid 7-digit Israeli identity numbers where the leftmost 2 digits, "00", are omitted. At least 50% of the 7-digit numbers in the text must be valid. For example: "9896747".
Israeli Identity Number (7-Digits) Near Term	Detects valid 7-digit Israeli identity numbers where the leftmost 2 digits, "00", are omitted near a support term in Hebrew, Arabic, or English. For example: "Teudat Zehut 9896747".
Israeli Identity Number - 7-Digits (Wide)	Detects valid 7-digit Israeli identity numbers where the leftmost 2 digits, "00", are omitted. For example: "9896747".
Israeli Identity Number - 8-Digits (Default)	Detects valid 8-digit Israeli identity numbers where the leftmost digit, "0", is omitted. At least 50% of the 8-digit numbers in the text must be valid. For example: "64810948".
Israeli Identity Number (8-Digits) Near Term	Detects valid 8-digit Israeli identity numbers where the leftmost digit, "0", is omitted near a support term in Hebrew, Arabic, or English. For example: "Teudat Zehut 64810948".
Israeli Identity Number - 8-Digits (Wide)	Detects valid 8-digit Israeli identity numbers where the leftmost digit, "0", is omitted. For example: "64810948".
Israeli Insurance Claims	Detection of Israeli life insurance claims numbers when appearing in proximity to related terms.
Israeli life Insurance	Detection of Israeli life insurance numbers when appearing in proximity to life insurance related terms.
Israeli Names	Detection of Israeli full names.
Israeli Phone Numbers (Default)	Detection of Israeli Phone Numbers, when found in proximity to related terms.
Israeli Phone Numbers (Wide)	Detection of Israeli Phone Numbers.
Isreali generic insurance number (delimited)	Detection of generic Israeli insurance policy numbers in standard delimitation
Isreali generic insurance number (non delimited)	Detection of generic Israeli insurance policy numbers without delimitation
Italian Names	Detection of Italian full names.
Italy Codice Fiscale Number	Detection of validated Italy Codice Fiscale, possibly in proximity to related terms.
Japan Emails	Detection of at least 20 email addresses revealing personal information about the owner, such as their full name and place of employment.
Japan Ledger	Detection of Japanese Ledger Number in proximity Ledger related terms. The terms and digits are detected in both English and Japanese.
Japan Pension	Detection of Japanese Pension Number in proximity to pension related terms. The terms and digits are detected in both English and Japanese.
Japan Phone Numbers	Detection of Japanese telephone numbers, where at least one number is in proximity to phone number related terms in English or Japanese.
Japanese Corporate Numbers (Wide)	Detects valid 13-digit delimited or un-delimited Japanese Corporate Numbers. For example "7-0000-1201-1012".
Japanese Corporate Numbers (Default)	Detects valid 13-digit delimited or un-delimited Japanese Corporate Numbers. At least 70% of all 13-digit numbers need to be valid. For example "7-0000-1201-1012".
Japanese Corporate Numbers Near Term	Detects valid 13-digit delimited or un-delimited Japanese Corporate Numbers near a support term in English or in Japanese. For example "Corporate Number 7-0000-1201-1012".
Japanese Credit Cards	Detection of valid credit card number prevalent in Japan, employing various heuristics involving credit card related terms and use of delimiters. The terms and credit card digits are detected in both English and Japanese.
Japanese Individual Numbers (Wide)	Detects valid 12-digit delimited or un-delimited Japanese Individual Numbers (My Numbers). For example "3591 0546 2229".
Japanese Individual Numbers (Default)	Detects valid 12-digit delimited or un-delimited Japanese Individual Numbers (My Numbers). At least 70% of all 12-digit numbers need to be valid. For example "3591 0546 2229".
Japanese Individual Numbers Near Term	Detects valid 12-digit delimited or un-delimited Japanese Individual Numbers (My Numbers) near a support term in English or Japanese. For example "My Number 3591 0546 2229".
Kazakh Taxpayer Registration Numbers	Detection of valid Kazakh Taxpayer Registration Numbers.
Kazakh Individual Identification Numbers	Detection of valid Kazakh Individual Identification Numbers.
Kazakh Business Identification Numbers	Detection of valid Kazakh Business Identification Numbers.
Key Phrase in Header/Footer	Detection of user-defined, case-insensitive key phrases in the header or footer of documents. For example, the key phrase "secret" will be found on the texts "Secretive and highly classified" and "TOP SECRET".
Korea Phone Numbers (Narrow)	Detection of Korea phone numbers, employing statistical analysis.
Korea Phone Numbers (Wide)	Detection of Korea phone numbers.
Korea Phone Numbers (With Support)	Detection of Korea phone numbers, when found in proximity to related terms such as 'phone' in English or Korean.
Latitude-Longitude coordinates	Detection of Latitude-Longitude coordinates.
MAC Address (Default)	Detection of MAC addresses. Detects only delimited MAC addresses.
MAC Address (Narrow)	Detection of MAC addresses, detects delimited MAC addresses with a valid OUI (Organizationally Unique Identifier).
MAC Address (Wide)	Detection of MAC addresses. Detects delimited MAC addresses and non-delimited MAC addresses with support terms in proximity.
Malaysia ID: no date validation	Detection of validated Malaysia ID in a form like dddddd-16-7356. Does not require support term in proximity.
Malaysia ID: no date validation, with proximity	Detection of validated Malaysia ID in a form like dddddd-16-7356 providing that Malaysia ID terms such as MyKad, GMPC or ID appears in proximity.
Malaysia ID: with date and BP validation	Detection of validated Malaysia ID in a form like YYMMDD-BP-7356, where first six digits stand for a birth date. Does not require support term in proximity.
Malaysia ID: with date and BP validation, with proximity	Detection of validated Malaysia ID in a form like dddddd-BP-7356, providing that Malaysia ID terms such as MyKad, GMPC or ID appears in proximity.
Malaysia ID: with date validation	Detection of validated Malaysia ID in a form like YYMMDD-16-7356, where first six digits stand for a birth date. Does not require support term in proximity.
Malaysia ID: with date validation, with proximity	Detection of validated Malaysia ID in a form like YYMMDD-16-7356, where first six digits stand for a birth date, providing that Malaysia ID terms such as MyKad, GMPC or ID appears in proximity.
Malicious Concealment	Detection of content suspected to be manipulated (e.g. by replacing letters with symbols) to avoid detection, using methods such as statistical analysis.
Malicious Concealment (Narrow)	Detection of content suspected to be manipulated (e.g. by replacing letters with symbols) to avoid detection, using methods such as statistical analysis.
Malicious Concealment (Wide)	Detection of content suspected to be manipulated (e.g. by replacing letters with symbols) to avoid detection, using methods such as statistical analysis. May cause false positives.
Malicious Concealment: L33T	Detection of content suspected to be manipulated using "L33T" manipulation.
Malicious Concealment: L33T (Narrow)	Detection of content suspected to be manipulated using "L33T" manipulation.
Malicious Concealment: L33T (Wide)	Detection of content suspected to be manipulated using "L33T" manipulation, may cause false positives.
Malicious Concealment: Reversed Text	Detection of content suspected to be manipulated as reversing the text.
Malicious Concealment: Reversed Text (Narrow)	Detection of content suspected to be manipulated as reversing the text.
Malicious Concealment: Reversed Text (Wide)	Detection of content suspected to be manipulated as reversing the text, may cause false positives.
Malicious Concealment: ROT13	Detection of content suspected to be manipulated using "ROT13" manipulation.
Malicious Concealment: ROT13 (Narrow)	Detection of content suspected to be manipulated using "ROT13" manipulation.
Malicious Concealment: ROT13 (Wide)	Detection of content suspected to be manipulated using "ROT13" manipulation, may cause false positives.
Malicious Concealment: Upside Down Text	Detection of content suspected to be manipulated using "upside down" manipulation.
Malicious Concealment: Upside Down Text (Narrow)	Detection of content suspected to be manipulated using "upside down" manipulation.
Malicious Concealment: Upside Down Text (Wide)	Detection of content suspected to be manipulated using "upside down" manipulation, may cause false positives.
Malware (Wide)	Detection of transactions that are suspected to be malicious, based on analysis of traffic of known infected machines (Wide). HTTP/S channel only. Applies only when TRITON AP-WEB is installed.
Malware (Default)	Detection of transactions that are suspected to be malicious, based on analysis of traffic of known infected machines (Default). HTTP/S channel only. Applies only when TRITON AP-WEB is installed.
Malware (Narrow)	Detection of transactions that are suspected to be malicious, based on analysis of traffic of known infected machines (Narrow). HTTP/S channel only. Applies only when TRITON AP-WEB is installed.
Malware (Strict)	Detection of transactions that are suspected to be malicious, based on analysis of traffic of known infected machines (Strict). HTTP/S channel only. Applies only when TRITON AP-WEB is installed.
Malware (Strict) (Uncategorized)	Detection of transactions that are suspected to be malicious, based on analysis of traffic of known infected machines (Strict)(Uncategorized). HTTP/S channel only. Applies only when TRITON AP-WEB is installed.
MAR: Actuary Reports	Detection of documents contain actuary reports (in attachments or files).
Mexican Names	Detection of full names (Wide). This content classifier should be used in conjunction with additional data as it is permissive.
Mexico CURP (Clave Unica de Registro de Poblacion)	Detection of Contract Nomenclature of CPISP (Clave Personal Interna del Servidor Publico).
Mexico RFC Number (Default)	Detection of Mexico RFC numbers, employing various heuristics involving RFC related terms and homoclaves.
Mexico RFC Number (Wide)	Detection of Mexico RFC numbers, without requiring homoclave or RFC term in proximity.
National Drug Code (Default)	Detection of National Drug Code (NDC) numbers of prescription drugs. Undelimited numbers are subjected to statistical validation.
National Drug Code (Narrow)	Detection of at least one delimited number or 5 undelimited National Drug Code (NDC) numbers of prescription drugs, using statistical validation.
National Drug Code (Wide)	Detection of National Drug Code (NDC) numbers of prescription drugs. All instances are returned and no further check is made, may cause false positives.
Netherlands: Bank Account	Detection of Elfproef validated Dutch Bank Account numbers.
Netherlands: Bank Account with proximity	Detection of Elfproef validated Dutch Bank Account numbers, when found in proximity to bank account related terms, such as "giropas".
Netherlands: Sofinummer	Detection of validated Netherlands Sofinummers, in proximity to related terms.
New Zealand NHI - no support	Detection of validated NHI Numbers, does not demand further evidence.
NHS Numbers (Default)	Detection of validated NHS numbers.
NHS Numbers (Narrow)	Detection of validated NHS numbers. Requires additional evidence, such as NHS related terms in proximity.
NHS Numbers (Wide)	Detection of all forms of valid NHS numbers.
Norway Personnummer	Detection of Norway Personal Numbers (personnummer), including d-numbers, possibly in proximity to related terms.
Norwegian Names	Detection of Norwegian full names.
Password Files	Detection of password files
Password Files (Wide)	Detection of password files
Passwords	Detection of passwords in proximity to a password term.
Passwords - common passwords without term	Detection of common passwords (based on various common passwords lists) with or without trailing digits. No term is required in proximity. The minimal number of passwords is configurable through the parameter.
Passwords - keyboard sequence	Detection of passwords comprised of adjacent keyboard sequences.
Passwords for HTTP	Detection of passwords in proximity to a password term. Should be used on HTTP channel.
PCI Audit: CCN with CVV	Detection of valid credit cards near CVV.
PCI Audit: CCN with Expiration Date	Detection of valid credit cards near expiration dates.
PCI Audit: Masked Credit Cards	Detection of masked American Express, Discover, JCB, MasterCard, and Visa credit cards.
PCI Audit: Non-Delimited CCNs with no word boundaries	Detection of possible non-delimited credit card numbers, with no word boundaries.
PCI Audit: Non-Delimited Credit Card Numbers	Detection of valid non-delimited credit card numbers. May cause false positives.
PCI Audit: User-Defined CCN Delimiter	Detection of potential credit-card-numbers, possible delimiters can be added by the user, default delimiter is "-".
People's Republic of China Identification Numbers	Detection of validated People's Republic of China Identification Numbers.
Perl Source Code (By Content)	Detection of Perl source code by content.
Philippines Address (Default)	Detection of Philippines address (default behavior).
Philippines Address (Narrow)	Detection of Philippines address, tuned to minimize false positives (may cause false negatives).
PIN with proximity	Detection of personal identification numbers (PINs) in proximity to a PIN-related term.
Poland: ID	Detection of Polish Identification numbers.
Poland: NIP Number	Detection of Polish NIP numbers.
Poland: PESEL Number	Detection of Polish Pesel numbers.
Poland: REGON Number	Detection of REGON numbers.
PRC Business Registration Numbers - 15 digits (default)	Detection of Peoples Republic of China's 15 digits Business Registration Numbers (default behavior)
PRC Business Registration Numbers - 15 digits (narrow)	Detection of Peoples Republic of China's 15 digits Business Registration Numbers (narrow behavior)
PRC Business Registration Numbers - 15 digits (wide)	Detection of Peoples Republic of China's 15 digits Business Registration Numbers (wide behavior)
Proximity Classifier	This classifier is looking for two elements in proximity (determined by the user) to each other. Classifier has three parameters as input. "First Element" and "Second Element" determines the values to be searched, you can write a keyword or a regexp. The parameter "Proximity In Characters" determines the number of characters to look before and after matches of first element.
Python Source Code (Wide)	Detection of Python source code. At least 50 percent of the non-empty lines in the file should be valid Python lines and at least 1 unmistakable Python line should be detected.
Python Source Code (Default)	Detection of Python source code. At least 70 percent of the non-empty lines in the file should be valid Python lines and at least 4 unmistakable Python lines should be detected.
Questionable Image	Detection of nudity images.
Romania - ID	Detection of validated Romanian ID numbers.
Routing Number (Default)	Detection of issued RTNs, includes advanced statistical heuristics.
Routing Number (Narrow)	Detection of issued RTNs, includes advanced statistical heuristics and search for support terms.
Routing Number (Wide)	Detection of issued RTNs.
Russian Classification on Objects of Administrative Division (with check digit)	Detection of Russian Classification on Objects of Administrative Division (with check digit).
Russian Classification on Objects of Administrative Division (without check digit)	Detection of Russian Classification on Objects of Administrative Division (without check digit).
Russian Individual Personal Account Insurance number	Detection of Russian Individual Personal Account Insurance number
Russian Moscow Social Card number (SOCCARD)	Detection of Russian Russian Moscow Social Card (SOCCARD)
Russian Moscow Social Card serial number	Detection of Russian Russian Moscow Social Card (SOCCARD)
Russian Names (Default)	Detection of Russian full names.
Russian Names (Narrow)	Detection of Russian full names.
Russian Names (Wide)	Detection of Russian full names.
Russian Passport Spreadsheet	Detection of Russian passport numbers in spreadsheet files.
Russian Primary State Registration numbers (13 digits)	Detection of 13 digits Russian Primary State Registration numbers
Russian Primary State Registration numbers (15 digits)	Detection of 15 digits Russian Primary State Registration numbers
Russian Taxpayer Identification numbers validator (10 digits)	Detection of 10 digits Russian Taxpayer Identification numbers
Russian Taxpayer Identification numbers validator (12 digits)	Detection of 12 digits Russian Taxpayer Identification numbers
Russian Unified Classifier of Enterprises and Organizations	Detection of Russian Unified Classifier of Enterprises and Organizations number.
Security Accounts Manager (SAM) Files	Detection of SAM files according to internal file properties.
Security Accounts Manager (SAM) Files - Textual (Wide)	Detection of SAM textual files.
Security Accounts Manager (SAM) Files - Textual (Default)	Detection of SAM textual files. All lines in the file should be valid hash lines. Characters statistical analysis is used when parts of a string are repeated, indicating the likelihood of an unintended match.
Security Accounts Manager (SAM) Files - Textual (Narrow)	Detection of SAM textual files. All lines in the file should be valid hash lines. At least 4 lines are needed in order to have a match. Characters statistical analysis is used when parts of a string are repeated, indicating the likelihood of an unintended match.
Shadow Files	Detection of shadow files
Shadow Files (Wide)	Detection of shadow files
SIN (Default)	Detection of valid Canadian social insurance numbers, employing context sensitive lexical analysis, statistical analysis of patterns and custom dictionaries.
SIN (Narrow)	Restricted detection of valid Canadian social insurance numbers, tuned in order to minimize false positives. Requires additional evidence, such as SIN related terms (English or French) in proximity.
SIN (Wide)	Permissive detection of valid Canadian social insurance numbers. Does not require support term in proximity.
SIN: with proximity	Detection of valid Canadian social insurance numbers, in proximity to social insurance related terms in English or French.
Singapore Addresses (Default)	Detection of singapore addresses
Singapore Addresses (Narrow)	Detection of singapore addresses in the most formal form
Singapore ID	Detection of Singapore NRIC, UIN and FIN identification numbers. Does not require identification related terms in proximity.
Singapore ID with support	Detection of Singapore NRIC, UIN and FIN identification numbers, in proximity to identification related terms.
Singaporean Phone Numbers (Default)	Detection of Singaporean phone numbers.
Singaporean Phone Numbers (Narrow)	Detection of Singaporean phone numbers, employing statistical analysis.
Slovak and Czech Birth Numbers Near Term	Detects valid 9- or 10-digit delimited or un-delimited Slovak and Czech birth numbers (Rodne Cislo) near a support term. For example "Rodne Cislo 8501306605".
Slovak and Czech Birth Numbers (Wide)	Detects valid 9- or 10-digit delimited or un-delimited Slovak and Czech birth numbers (Rodne Cislo). For example "450819001".
Source Code: C or JAVA	Detection of source code content written in C, C++, C# or Java, using lexical analysis of terms, patterns and structures for optimal accuracy.
Source Code: C or JAVA (Wide)	Detection of files which are suspicious to be a source code content - written in C, C++, C# or Java, using lexical analysis of terms, patterns and structures.
Source Code: Verilog	Detection of Verilog source code, using lexical analysis of terms, patterns and structures for optimal accuracy.
South Africa ID	Detection of valid South Africa ID numbers (looking for support terms or implying statistical validation).
South Africa ID (narrow)	Detection of valid South Africa ID numbers (looking for support terms and implying statistical validation).
South Africa ID (wide)	Detection of valid South Africa ID numbers (not looking for support terms).
South Korea ID	Detection of validated South Korea ID in a form like dddddd-ddddddd.
South Korea ID - Wide	Detection of validated South Korea ID, both delimited and non-delimited.
Spain: DNI Number	Detection of Spain DNIs, in proximity to related terms.
Spain: DNI Number (Wide)	Detection of Spain DNIs.
Spanish Address	Detection of Spanish addresses composed of address support terms in English or Spanish and a house number.
Spanish Passports	Detection of Spanish Passport numbers (2 letters preceded by 6 numbers) with a support term in proximity.
Spanish Phone Numbers	Detection of Spanish Phone Numbers with 9 or 11 digits, start with 6 or 9 for 9 digits, and 346 or 349 for 11 digits. Supported delimitations are in the following format: ddd-ddd-ddd, ddd ddd ddd, ddddddddd, dd-ddd-ddd-ddd, dd ddd ddd ddd, or ddddddddddd.
Spanish Phone Numbers (Wide)	Detection of Spanish Phone Numbers with 9 or 11 digits, start with 6 or 9 for 9 digits, and 346 or 349 for 11 digits. Supported delimitations are in the following format: ddd-ddd-ddd, ddd ddd ddd, ddddddddd, dd-ddd-ddd-ddd, dd ddd ddd ddd, or ddddddddddd. Note: This classifier may cause false positive and not recommended for use.
SPSS data files: sps	Detection of SPSS (.sps) text files.
SQL Detection (Default)	Detection of SQL queries (default behavior)
SQL Detection (Narrow)	Detection of SQL queries (narrow behavior)
SQL Detection (Wide)	Detection of SQL queries (wide behavior)
Suspected Mail to Self	Detection of similar names in the source and destination of email addresses. Should be used with an AND condition together with the relevant type of sensitive information.
Sweden ID - no support	Detection of validated Personal Identity Numbers, does not demand further evidence.
Swedish Names	Detection of Swedish full names.
Swedish Names (Narrow)	Detection of Swedish full names (Narrow).
Swedish Names (Wide)	Detection of Swedish full names (Wide). This content classifier should be used in conjunction with additional data because it is permissive.
Taiwan address (default)	Detection of Taiwan address (common street names and county names in English or Chinese) with address support term.
Taiwan address (narrow)	Detection of Taiwan address (common street names and county names in English or Chinese) with address support term in proximity.
Taiwan address (wide)	Detection of Taiwan address (common street names and county names in English or Chinese)
Taiwan ID	Detection of validated Taiwan ID of the form A123456789.
Taiwan ID with support	Detection of validated Taiwan ID of the form A123456789, providing that Taiwan ID terms in English or Chinese appears in proximity.
Taiwan PII: Birthday	Detection of Taiwan birthdays.
Taiwan PII: Marital Status	Detection of Taiwan marital status.
Taiwan PII: Passport Numbers	Detection of passport numbers.
Thailand ID number (Default)	Detection of at least 1 Thai ID number with support terms.
Thailand ID number (Wide)	Detection of at least 1 Thai ID number without support terms.
Time Of Day - general 1	Return 'True' if the current time is after the time specified as the 'from time', and before the 'to time'. The hours are configurable in the classifier's parameters. You can update the from and to hours by editing the classifier. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Time Of Day - general 2	Return 'True' if the current time is after the time specified as the 'from time', and before the 'to time'. The hours are configurable in the classifier's parameters. You can update the from and to hours by editing the classifier. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Time Of Day - general 3	Return 'True' if the current time is after the time specified as the 'from time', and before the 'to time'. The hours are configurable in the classifier's parameters. You can update the from and to hours by editing the classifier. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Time Of Day - Outside Working Hours	Return 'True' if the current time falls between the times specified as Outside working hours (the default values for Outside working hours are from 5 PM to 8 AM). The hours are configurable in the classifier's parameters. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Time Of Day - Working Hours	Return 'True' if the current time falls between the times specified as working hours (the default values for working hours are from 8 AM to 5 PM). The hours are configurable in the classifier's parameters. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Turkey PII in Spreadsheets	Detection of spreadsheets containing Turkish personally identifiable information (PII) by looking for column headers related to information such as full name, address, citizenship number, etc.
Turkey TC Kimlik	Detection of validated Turkish Citizenship numbers (TC Kimlik), when appearing in proximity to TC Kimlik related terms in English, Turkish and other European languages.
Turkey TC Kimlik (Wide)	Detection of validated Turkish Citizenship numbers (TC Kimlik).
Turkey TC Kimlik (Wide)	Detection of validated Turkish Citizenship numbers (TC Kimlik).
Turkish Tax IDs	Detection of validated Turkish Tax ID Numbers given by government to persons or companies.
UK Driver Number (Default)	Detection of UK Driver Numbers with support terms.
UK Driver Number (Wide)	Detection of UK Driver Numbers.
UK Names (Default)	Detection of UK full names.
UK Names (Narrow)	Detection of UK full names (Narrow).
UK Names (Wide)	Detection of UK full names (Wide). This content classifier should be used in conjunction with additional data as it is permissive.
UK Voter Number	Detection of UK electoral roll numbers in proximity to related terms.
Uncategorized URL Detection	Detection of Uncategorized URLs. This uses the URL categories list. Supported only with Linking Service installed. Applies only when TRITON AP-WEB is installed.
Union Pay Credit Cards (Default)	Detection of Union Pay credit card numbers employing various heuristics involving credit card related terms and use of delimiters. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Union Pay Credit Cards (Narrow)	Detection of Union Pay credit card numbers. Requires additional evidence, such as credit card related terms in proximity, in order to qualify number as a credit card number. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Union Pay Credit Cards (Wide)	Detection of potential Union Pay credit card numbers, based only on format and validation, may cause false-positives. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Unique Master Citizen Number (Wide)	Detects valid 13-digit Unique Master Citizen Numbers. For example "0801977505006".
Unique Master Citizen Number (Default)	Detects valid 13-digit Unique Master Citizen Numbers. At least half of the 13-digit numbers in the text need to be valid. For example "0801977505006".
Unique Master Citizen Number Near Term	Detects valid 13-digit Unique Master Citizen Numbers near a support term. For example "Unique Master Citizen Number 0801977715000".
Unusual Hours	Detects the transaction time as 'unusual hour' if the current time falls between the times specified as parameters for this classifier. The default values for unusual hours are from 21:00 (9 PM) to 5:00 (5 AM). The 'First working day' and 'Last working day' define the working day range. Transactions that are out of the working days are detected by this classifier regardless of their time.
URL category detection	Uses the inspected URL category as a classifier in the rule's condition.
US Address	Detection of US address.
US Age: greater than	Detection of ages greater then the age specified. Default age is 13.
US Age: smaller than	Detection of ages smaller then the age specified. Default age is 13.
US Names - default	Detection of full names.
US Names - narrow	Detection of full names (Narrow).
US Names - wide	Detection of full names (Wide). This content classifier should be used in conjunction with additional data as it is permissive.
US Phone Numbers	Detection of US phone numbers.
US SSN (Audit)	A permissive classifier for detecting potential social security numbers, possibly with a non-standard delimitation or without definite boundaries. For example, if the string "aaa145-22-5-6-7-8" appears in a single line, it produces a match. This classifier can cause many false positives.
US SSN - Wide Minus Default	Permissive detection of all delimitation forms of valid social security numbers that have been issued by the US Social Security Administration, taking into account SSN randomization. Detects all SSNs that belong to 'wide' sensitivity and not to 'default'.
US SSN (Default)	Detection of valid social security numbers that have been issued by the US Social Security Administration, taking into account SSN randomization, employing context sensitive lexical analysis, statistical analysis of patterns and custom dictionaries.
US SSN (Narrow)	Restricted detection of valid social security numbers, which have been issued by the US Social Security Administration, taking into account SSN randomization, tune in order to minimize false-positives. Requires additional evidences, such as SSN related terms in proximity.
US SSN (Wide)	Permissive detection of all delimitation forms of valid social security numbers that have been issued by the US Social Security Administration, taking into account SSN randomization.
US SSN: not-masked	Detection of valid social security numbers that have been issued by the US Social Security Administration, taking into account SSN randomization, context-sensitive lexical analysis, statistical analysis of patterns, and custom dictionaries. The returned values of this classifier are not masked.
User-defined file types extension	Detection of specific file types (user-defined) according to their extension.
User-defined dictionary (non-unique)	Detection of keywords. The keywords are supplied as a parameter. In order to use it, insert keywords into the parameter, separated by a semicolon. Keywords are case-insensitive.
User-defined dictionary (unique)	Detection of keywords, where each keyword is counted only once. The keywords are supplied as a parameter to the script. In order to use it, insert keywords into the parameter, separated by a semicolon. Consider keyword unique appearances. Keywords are case-insensitive.
VIN Code (Default)	Detection of Vehicle Identification Number (VIN) Code in proximity to a VIN-related term, such as 'Vehicle Identification Number' (default behavior)
VIN Code (Wide)	Detection of Vehicle Identification Number (VIN) Code - 'wide' behavior
Visual Basic (Default)	Detection of Visual Basic Source Code - 'default' behavior.
Visual Basic (Narrow)	Detection of Visual Basic Source Code - 'narrow' behavior.
Visual Basic (Wide)	Detection of Visual Basic Source Code - 'wide' behavior.
W2 Form Support	Detection of IRS W2 forms
x86 Assembly Source Code	Detection of x86 Assembly Source Code.