Script classifiers

Predefined Policies and Classifiers | Forcepoint DLP | 8.7.1

This section contains the full list of predefined script classifiers. Edit the classifiers as needed. For information, see Editing a predefined script.


Classifier	Description
.htpasswd file that uses bcrypt, MD5, or SHA-1 hash function (Default).	Detection of .htpasswd file that use the bcrypt, MD5, SHA-1, or salted SHA-1 hash functions. All lines in the file should be valid hash lines. Characters statistical analysis is used in order to prevent unintended matches. An example for a bcrypt line is "admin:$2y$14$mhtB34wX83QuzRhTu.4fqu.75XpELvXXaC.bCbYzbugMw2H/RyTcu".
.htpasswd file that uses bcrypt, MD5, or SHA-1 hash function (Narrow)	Detection of .htpasswd file that use the bcrypt, MD5, SHA-1, or salted SHA-1 hash functions. All lines in the file should be valid hash lines. At least 4 lines are needed in order to have a match. Characters statistical analysis is used in order to prevent unintended matches. An example for a bcrypt line is "admin:$2y$14$mhtB34wX83QuzRhTu.4fqu.75XpELvXXaC.bCbYzbugMw2H/RyTcu".
.htpasswd file that uses bcrypt, MD5, or SHA-1 hash function (Wide)	Detection of .htpasswd file that use the bcrypt, MD5, SHA-1, or salted SHA-1 hash functions (e.g., "admin:$2y$14$mhtB34wX83QuzRhTu.4fqu.75XpELvXXaC.bCbYzbugMw2H/RyTcu").
.htpasswd file that uses the crypt hash function (Default)	Detection of .htpasswd file that use the crypt hash function. All lines in the file should be valid hash lines. At least 4 lines are needed in order to have a match. Characters statistical analysis is used in order to prevent unintended matches. An example for a crypt line is "admin:uBbBQTqv1Kx9M".
.htpasswd file that uses the crypt hash function (Narrow)	Detection of .htpasswd file that use the bcrypt, MD5, SHA-1 or salted SHA-1 hash functions. All lines in the file should be valid hash lines. At least 8 lines are needed in order to have a match. Characters statistical analysis is used in order to prevent unintended matches. An example for a crypt line is "admin:uBbBQTqv1Kx9M".
.htpasswd file that uses the crypt hash function (Wide)	Detection of .htpasswd file that use the crypt hash function. At least 3 lines are needed in order to have a match. An example for a crypt line is "admin:uBbBQTqv1Kx9M".
1st Magnetic Track	Detection of the string encoded on the 1st magnetic track of a credit card, containing the card number, and personal information of the card holder.
1st Magnetic Track (Chinese cards)	Detection of the string encoded on the 1st magnetic track of a Chinese credit card, containing the card number, and personal information of the card holder.
2nd Magnetic Track	Detection of the string encoded on the 2nd magnetic track of a credit card, containing the CCN, PIN, expiration date, and other card issuer data.
2nd Magnetic Track (Chinese cards)	Detection of the string encoded on the 2nd magnetic track of a chinese credit card, containing the CCN, PIN, expiration date, and other card issuer data.
3rd Magnetic Track	Detection of the string encoded on the 3rd magnetic track of a credit card, containing the CCN, PIN, and other card issuer data.
3rd Magnetic Track (Chinese cards)	Detection of the string encoded on the 3rd magnetic track of a Chinese credit card, containing the CCN, PIN, and other card issuer data.
9-Digit Slovak and Czech Birth Numbers	Detects valid 9-digit delimited or un-delimited Slovak and Czech birth numbers (Rodne Cislo). At least half of all 9-digit numbers need to be valid. For example "450819001".
10-Digit Slovak and Czech Birth Numbers	Detects valid 10-digit delimited or un-delimited Slovak and Czech birth numbers (Rodne Cislo). At least half of all 10-digit numbers need to be valid. For example "8501306605".
Aadhaar Number	Detection of Aadhaar 12 digit individual identification numbers.
ActionScript source code	Detection of source code content written in ActionScript, employing context-sensitive lexical analysis, patterns, and structures.
Australian Address	Detects Australian addresses. Uses several address formats such as number followed by a word and then a term that relates to a street (e.g., St., Rd., Ave.) For example: 12 Brigadoon St.
Australian Business Number (Default)	Detects Australian Business Numbers (ABN). Looks for 11-digit numbers that follow the ABN rules. If more than 3 valid ABNs are found, the classifier determines the percentage of valid ABNs to 11-digit numbers. If fewer than 4 valid ABNs are found, the classifier looks for ABN-related terms, such as 'ABN' or 'Australian Business Number', in proximity to the numbers found. For example: ABN: 12345678900
Australian Business Number (Wide)	Detects Australian Business Numbers (ABNs). Looks for 11-digit numbers that follow the ABN rules. For example: 12345678900. If one or more ABNs are found, the rule is triggered.
Australian Names (Default)	Detects full Australian names. Uses first-name and last-name dictionaries as well as internal dictionaries to identify valid full names. Weights case (John Smith vs. john smith) and honorifics (Dr., Mr., Mrs.). Uses a moderate threshold to signify a match. For example, using the default classifier, 'John Smith', 'john Smith', and 'dr. john smith' trigger the rule, but 'john smith' does not. Use the 'Default' classifier to balance between false positives and false negatives.
Australian Names (Narrow)	Detects full Australian names. Uses first-name and last-name dictionaries as well as internal dictionaries to identify valid full names. Weights case (John Smith vs. john smith) and honorifics (Dr., Mr., Mrs.). Uses a high threshold to signify a match. For example, using the narrow classifier, only 'John Smith' triggers the rule. 'john Smith', 'dr. john smith', and 'john smith' do not. Use the 'Narrow' classifier to reduce the false positives.
Australian Names (Wide)	Detects full Australian names. Uses first-name and last-name dictionaries as well as internal dictionaries to identify valid full names. Weights case (John Smith vs. john smith) and honorifics (Dr., Mr., Mrs.). Uses a low threshold to signify a match. For example, using the wide classifier, all permutations of 'John Smith' trigger the rule, including 'john Smith', 'dr. john smith', and 'john smith'. Use the 'Wide' classifier to reduce the false negatives.
Australian Tax File Number (Default)	Detects valid nine-digit Australian Tax File Numbers (TFN). At least 40% of the nine-digit numbers in the text must be valid; for example, "565051611".
Australian Tax File Number (Wide)	Detects valid nine-digit Australian Tax File Numbers (TFN); for example, "565051611".
Australian Tax File Number Near Term	Detects valid nine-digit Australian Tax File Numbers (TFN) near a support term; for example, "TFN: 565051611".
Austrian Social Security Number (Wide)	Detects valid 10-digit Austrian social security numbers (Sozialversicherungsnummern). For example: "1237 010180".
Austrian Social Security Number (Default)	Detects valid 10-digit Austrian social security numbers (Sozialversicherungsnummern). At least 30% of the 10-digit numbers in the text must be valid. For example: "1237 010180".
Austrian Social Security Number Near Term	Detects valid 10-digit Austrian social security numbers (Sozialversicherungsnummern) near a support term in English or German. For example: "Sozialversicherungsnummer 1237010180".
Belgium: ID Card Number	Detection of validated Belgium ID Card numbers
Brazil: RG Numbers (Default)	Detection of RG (Registro Geral) numbers.
Brazil: RG Numbers (Narrow)	Detection of RG (Registro Geral) numbers when appearing with support terms.
Brazilian CPF Number	Detection of validated Brazil CPF numbers.
Brazilian Name	Detection of Brazilian full names.
Bulgarian Unified Civil Number (Wide)	Detects valid 10-digit Bulgarian unified civil numbers. For example: "6909088552".
Bulgarian Unified Civil Number (Default)	Detects valid 10-digit Bulgarian unified civil numbers. At least 50% of the 10-digit numbers in the text must be valid. For example: "6909088552".
Bulgarian Unified Civil Number Near Term	Detects valid 10-digit Bulgarian unified civil numbers near a support term in Bulgarian or English. For example: "Unified Civil Number 6909088552".
CAD x_t text format	Detection of CAD x_t text files
Canadian Names (Default)	Detection of Canadian full names.
Canadian Names (Wide)	Detection of Canadian full names.
CCN - for printer agent	Detection of valid credit card numbers, employing context sensitive lexical analysis and statistical analysis of patterns, taking into account possible errors that may be induced by the OCR software.
CDR	Detection of Call Detail Records with information like source phone number, destination phone number, call date, duration, etc.
CDR: headers	Detection of Call Detail Records by looking for column headers related to information such as source phone number, destination phone number, call date, duration, etc.
Chilean National Identity Number (RUN/RUT) (Wide)	Detects valid case-insensitive 9-character Chilean National Identity Numbers (RUN) and Tax Identification Numbers (RUT) that consist of 8 digits followed by a digit or the letter "K". For example: "15414638-5".
Chilean National Identity Number (RUN/RUT) (Default)	Detects valid case-sensitive 9-character Chilean National Identity Numbers (RUN) and Tax Identification Numbers (RUT) that consist of 8 digits followed by a digit or the letter "K". At least 30% of the similar 9-character numbers in the text must be valid. For example: "15414638-5".
Chilean National Identity Number (RUN/RUT) Near Term	Detects valid 9-character Chilean National Identity Numbers (RUN) and Tax Identification Numbers (RUT) that consist of 8 digits followed by a digit or the letter "K", near a support term in Spanish or English. For example: "Rol Unico Nacional 15414638-5".
Chinese Credit Cards (Default)	Detection of credit card numbers used in the People's Republic of China employing various heuristics involving credit card-related terms and use of delimiters. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Chinese Credit Cards (Narrow)	Detection of credit card numbers used in the People's Republic of China. Requires additional evidence, such as credit card related terms in proximity, in order to qualify number as a credit card number. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Chinese Credit Cards (Wide)	Detection of potential credit card numbers used in the People's Republic of China, based only on format and validation. This classifier may cause false-positives. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Chinese Surnames	Detection of common Hong Kong surnames.
Colombian ID Number Near Term (Default)	Detects 7- or 8-digit Citizenship Card ID Numbers (Cedula de Ciudadania) or 10-digit Unique Personal Identification Number (NUIP) near a support term in Spanish or English. For example: "Cedula: 1129572839".
Colombian ID Number Near Term (Wide)	Detects 7- or 8-digit Citizenship Card ID Numbers (Cedula de Ciudadania) or 10-digit Unique Personal Identification Number (NUIP) near a support term in Spanish or English. Possible short support terms include "CC" and "ID". For example: "CC: 1129572839".
Confidential Header/Footer with Expiration Date	Detection of documents with confidential data in the header or footer that includes an American-formatted date (MM-DD-YYYY).
Contract Reference of Secretaria de Seguridad Publica (SSP)	Detection of Contract Nomenclature of Secretaria de Seguridad Publica (SSP).
Costa Rican ID Number Near Term (Default)	Detects of 9-digit Identification Numbers (Numero de Cedula Identidad) that may be preceded by the digit "0", near a permissive support term in Spanish or English. For example: "Cedula: 9-0071-5946".
Costa Rican ID Number Near Term (Narrow)	Detects of 9-digit Identification Numbers (Numero de Cedula Identidad) that may be preceded by the digit "0", near a support term in Spanish or English. For example: "Cedula de Identidad: 9-0071-5946".
Costa Rican Legal ID Number Near Term (Default)	Detects of 10- or 12-digit Legal Identification Numbers (Numero de Cedula Juridica) that may be preceded by the digit "0", near a permissive support term in Spanish or English. For example: "Cedula: 3 101 981567".
Costa Rican Legal ID Number Near Term (Narrow)	Detects of 10- or 12-digit Legal Identification Numbers (Numero de Cedula Juridica) that may be preceded by the digit "0", near a support term in Spanish or English. For example: "Cedula Juridica: 3-101-981567".
Count attachments	Used to count the number of attachments and/or recipients.
Credit Card Magnetic Tracks	Detection of the strings encoded on 1st. 2nd and 3rd magnetic tracks of a credit card.
Credit Cards - Wide Minus Default	Detection of potential credit card numbers, based only on format and validation, may cause false-positives. Detects all CCNs that belong to 'wide' sensitivity and not to 'default'. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Credit Cards (Default)	Detection of credit card numbers employing various heuristics involving credit card related terms and use of delimiters. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Credit Cards (Extra-Wide)	Detection of potential credit-card-numbers, based only on format and validation.
Credit Cards (Narrow)	Detection of credit card numbers. Requires additional evidence, such as credit card related terms in proximity, in order to qualify number as a credit card number. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Credit Cards (Wide)	Detection of potential credit card numbers, based only on format and validation, may cause false-positives. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Credit Cards Pattern	Detection of potential credit card number patterns based only on format (without validation).
Credit Cards: American Express	Detection of valid American Express credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Bankcard	Detection of valid Bankcard credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Diners	Detection of valid Diners credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Discover	Detection of valid Discover credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Enroute	Detection of valid Enroute credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Isracard	Detection of valid Isracard credit card numbers, when appearing together with an Isracard related term in English or Hebrew. By default, only the last 4 digits are shown in the reports.
Credit Cards: JCB 1sr	Detection of valid JCB credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: JCB 2nd	Detection of valid JCB credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Maestro, Switch or Solo	Detection of valid Maestro, Switch or Solo credit card numbers employing various heuristics involving credit card related terms in English and Russian, and use of delimiters.
Credit Cards: Master Card	Detection of valid MasterCard credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: RuPay	Detection of valid Rupay debit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: User-Defined IIN (Wide)	Detects potential credit card numbers, based only on format and validation. A list of allowed Issuer Identification Numbers (IIN) is read from the file CCN_IIN_Valid.csv, and a list of unallowed credit card numbers is read from the file CCN_Exceptions.csv. The files reside in the /policies_store/policies/scripts/ subdirectory where Forcepoint DLP is installed, and can be edited. Deploy settings in the Security Manager to apply any changes. This classifier may cause false positives.
Credit Cards: User-Defined IIN (Default)	Detects valid credit card numbers employing various heuristics involving credit-card-related terms and use of delimiters. A list of allowed Issuer Identification Numbers (IIN) is read from the file CCN_IIN_Valid.csv, and a list of unallowed credit card numbers is read from the file CCN_Exceptions.csv. The files reside in the /policies_store/policies/scripts/ subdirectory where Forcepoint DLP is installed, and can be edited. Deploy settings in the Security Manager to apply any changes.
Credit Cards: User-Defined IIN (Narrow)	A restrictive detection of credit card numbers, tuned to minimize false positives. This rule requires additional evidence, such as credit-card-related terms in proximity, in order to qualify a number as a credit card number. A list of allowed Issuer Identification Numbers (IIN) is read from the file CCN_IIN_Valid.csv, and a list of unallowed credit card numbers is read from the file CCN_Exceptions.csv. The files reside in the /policies_store/policies/scripts/ subdirectory where Forcepoint DLP is installed, and can be edited. Deploy settings in the Security Manager to apply any changes.
Credit Cards: Visa	Detection of valid Visa credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Credit Cards: Visa with 13 digits	Detection of valid 13 digit Visa credit card numbers employing various heuristics involving credit card related terms and use of delimiters.
Croatian Personal identification number (Wide)	Detects valid 11-digit Personal identification numbers. For example "92103795594".
Croatian Personal identification number (Default)	Detects valid 11-digit Personal identification numbers. At least 70% of the 11-digit numbers in the text need to be valid. For example "92103795594".
Croatian Personal identification number Near Term	Detects valid 11-digit Personal identification numbers near a support term. For example "Osobni identifikacijski broj 92103795594".
Cumulative HTTP number of Posts	Determines how many posts should exist before they are considered suspicious. This will only work on HTTP channel.
Cumulative HTTP number of Posts - Categorized URLs	Determines how many posts should exist before they are considered suspicious. This will only work on HTTP channel. Thresholds are configured for posting to categorized URLs.
Cumulative HTTP number of Posts - Uncategorized URLs	Determines how many posts should exist before they are considered suspicious. This will only work on HTTP channel. Thresholds are configured for posting to uncategorized URLs.
Cumulative HTTP Post Size	Determines which posts (according to size) will be counted. This will only work on HTTP channel.
Cumulative HTTP Post Size - Categorized URLs	Determines which posts (according to size) will be counted. This will only work on HTTP channel. Thresholds are configured for posting to categorized URLs.
Cumulative HTTP Post Size - Uncategorized URLs	Determines which posts (according to size) will be counted. This will only work on HTTP channel. Thresholds are configured for posting to uncategorized URLs.
CUSIP Numbers	Detection of validated CUSIP numbers.
Customizable IDs	Detection of ID numbers. The "ID Number pattern" parameter is the only mandatory parameter.
CV and Resume in Chinese (Wide)	A permissive classifier for detection of resumes and CVs in Chinese, using location-sensitive lexical analysis of terms and patterns common in such documents.
CV and Resume in Chinese (Default)	Detection of resumes and CVs in Chinese, using location-sensitive lexical analysis of terms and patterns common in such documents.
CV and Resume in Chinese (Narrow)	A restrictive classifier for detection of resumes and CVs in Chinese, using location-sensitive lexical analysis of terms and patterns common in such documents.
CV and Resume in English	Detection of resumes and CVs in English, using location-sensitive lexical analysis of terms and patterns common in such documents.
CV and Resume in Russian or Ukrainian	Detection of resumes and CVs in Russian or Ukrainian, using location-sensitive lexical analysis of terms and patterns common in such documents.
Cypriot Tax Identification Code Near Term	Detects Cypriot Tax Identification Codes near a support term in Greek or English. For example: "T.I.C. 12000017M".
Cyrillic User-Defined Weighted Dictionary (non-unique)	Detection of weighted Cyrillic keywords, where each term is counted according to the number of appearances. The terms and weights are supplied from an external file ('weighted_sections_Cyrillic_dictionary_unique.txt'), each dictionary in a separate section. In order to use it, insert your terms according to the example, and rename the section name in the script classifier parameter. Consider terms unique appearances. Adding wildcard ('*') in the beginning/end of the term, allow detecting regardless of the suffix/prefix - (up to 8 Cyrillic characters).
Cyrillic User-Defined Weighted Dictionary (non-unique) with EP Encryption	Detection of weighted Cyrillic keywords, where each term is counted according to the number of appearances. The terms and weights are supplied from an external file ('weighted_sections_Cyrillic_dictionary_unique.txt'), each dictionary in a separate section. In order to use it, insert your terms according to the example, and rename the section name in the script classifier parameter. Consider terms unique appearances. Adding wildcard ('*') in the beginning/end of the term, allow detecting regardless of the suffix/prefix - (up to 8 Cyrillic characters).
Cyrillic User-Defined Weighted Dictionary (unique)	Detection of weighted Cyrillic keywords, where each term is counted only once. The terms and weights are supplied from an external file ('weighted_sections_Cyrillic_dictionary_unique.txt'), each dictionary in a separate section. In order to use it, insert your terms according to the example, and rename the section name in the script classifier parameter. Consider terms unique appearances. Adding wildcard ('*') in the beginning/end of the term, allow detecting regardless of the suffix/prefix - (up to 8 Cyrillic characters).
Cyrillic User-Defined Weighted Dictionary (unique) with EP Encryption	Detection of weighted Cyrillic keywords, where each term is counted only once. The terms and weights are supplied from an external file ('weighted_sections_Cyrillic_dictionary_unique.txt'), each dictionary in a separate section. In order to use it, insert your terms according to the example, and rename the section name in the script classifier parameter. Consider terms unique appearances. Adding wildcard ('*') in the beginning/end of the term, allow detecting regardless of the suffix/prefix - (up to 8 Cyrillic characters).
Danish Account Numbers (Default)	Detection of Danish bank account numbers, when found in proximity to bank account related terms.
Danish Account Numbers (Narrow)	Detection of strictly formatted Danish bank account numbers, when found in proximity to bank account related terms.
Danish Account Numbers (Wide)	Detection of Danish bank account numbers.
Date Of Birth	Detection of dates of birth.
Date Of Birth (ages 10-90)	Detection of dates of birth for ages in the range 10-90 without support terms.
Date Of Birth (ages 20-65)	Detection of dates of birth for ages in the range 20-65 without support terms.
Denmark: CPR Number (Default)	Detection of at least 5 CPR numbers, or at least 1 CPR with term such as "CPR".
Denmark: CPR Number (Narrow)	Detection of at least 1 Danish CC number with a term or at least 10 without terms.
Denmark: CPR Number (Wide)	Detection of CPR numbers.
Dictionary Phrases in Header/Footer	Detection of user-defined, case-insensitive dictionary phrases in the header or footer of documents. For example, the dictionary phrase "secret" will be found on the text "TOP SECRET" but not in "Secretive and highly classified." The phrase list "secret, sensitive, private" will be found when any of those exact phrases are in header/footer text. Only the first phrase that is found shows as a violation trigger.
Document to Self (Default)	A classifier that returns a match if a CV or resume belongs to its distributer. It does this by extracting a name and an email address from the opening part of the document, and checking whether the corporate user name of the distributer can be extracted from the name found in the document (such as jsmith@mycompany.com can be extracted from John Smith or even Jennifer T. Smith-Brown). It also checks whether the user name and the email address could have been extracted from the same name (jsmith@mycompany.com can match john.smith1@gmail.com). If at least one of those tests is positive, the classifier returns a match.
Document to Self (Wide)	A classifier that returns a match if a CV or resume belongs to its distributer. It does this by extracting a name and an email address from the opening part of the document, and checking whether the corporate user name of the distributer can be extracted from the name found in the document (such as jsmith@mycompany.com can be extracted from John Smith or even Jennifer T. Smith-Brown). It also checks whether the user name and the email address could have been extracted from the same name and with a wide margin for error (jsmith@mycompany.com can match jksmiththegreat@gmail.com). If at least one of those tests is positive, the classifier returns a match.
Driver License: District of Colombia	Detection of valid District of Colombia driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Indiana	Detection of valid Indiana driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Iowa	Detection of valid Iowa driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Japan	Detection of Japanese Driver's License Number in proximity to driver license related terms. The terms and digits are detected in both English and Japanese.
Driver License: Massachusetts	Detection of valid Massachusetts driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Missouri	Detection of valid Missouri driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Nevada	Detection of valid Nevada driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Utah	Detection of valid Utah driver license number, in proximity to driver license terms, including typos and misspellings.
Driver License: Virginia	Detection of valid Virginia driver license number, in proximity to driver license terms, including typos and misspellings.
DSA Private Key	Detection of DSA private keys. The first line of the key contains the string "BEGIN DSA PRIVATE KEY".
EAR - Chemical Data Detection (Default)	Detection of chemical formulas and information related to composite materials.
EAR - Chemical Data Detection (Narrow)	Detection of chemical formulas and information related to composite materials. Requires high rate of evidence.
EAR - Chemical Data Detection (Wide)	Detection of chemical formulas and information related to composite materials. May cause false positives.
EIN (Default)	Detection of Employer ID Number (EIN).
Elliptic Curve Private Key	Detection of Elliptic Curve private keys. The first line of the key contains the string "BEGIN EC PRIVATE KEY".
Email Addresses	Detection of email addresses.
Email Addresses Domains	Detection of email addresses with different domains.
Email to Competitors	Detection of email sent to competitors. The competitors' domain names are supplied as a case-insensitive parameter. In order to use it, insert domain names into the parameter, separated by a semicolon.
Email Similarity	Detection of similar names in the source and destination of email addresses. Should be used with an AND condition together with the relevant type of sensitive information.
Encrypted Files - Unknown Format	Detection of encrypted files (unknown format) according to internal file properties.
Encrypted Files - Unknown Format (Wide)	Detection of encrypted files (unknown format) according to internal file properties (Wide)
Encrypted PKCS #8 Private Key	Detection of encrypted PKCS #8 private keys. The first line of the key contains the string "BEGIN ENCRYPTED PRIVATE KEY".
Estonian Personal Identification Code (Wide)	Detects valid 11-digit Estonian personal identification codes (Isikukood). For example: "39001012038".
Estonian Personal Identification Code (Default)	Detects valid 11-digit Estonian personal identification codes (Isikukood). At least 50% of the 11-digit numbers in the text must be valid. For example: "39001012038".
Estonian Personal Identification Code Near Term	Detects valid 11-digit Estonian personal identification codes (Isikukood) near a support term in Estonian or English. For example: "Isikukood 39001012038".
EU Credit Cards	Detection of valid credit card number prevalent in Europe, employing various heuristics involving credit card related terms and use of delimiters.
Expiration Dates: Date After	Return 'True' if the current date is after the date specified in the classifier parameters. Can be used to construct a rule that is valid since a certain date, default expiration date is 31/12/2000. For example, you can set a keyword classifier to be "Code Yellow", and use it in an 'and' relation with the 'Date After' classifier.
Expiration Dates: Date Before	Return 'True' if the current date is before the date specified in the classifier parameters. Can be used to construct a rule that is valid after a certain date, default date is 31/12/2020. For example, you can set a keyword classifier to be "Code Yellow", and use it in an 'and' relation with the 'Date Before' classifier.
Explicit Password	Detection of a phrase that explicitly marks a specific password. For example: "pwd=Qwerty1234" or "My password is '123456'".
F# Source Code (By Content)	Detection of F# source code by content.
Finnish SSN (Default)	Detection of Finnish validated Social Security Numbers, when found in proximity to related terms.
Finnish SSN (Wide)	Detection of Finnish validated Social Security Numbers.
Form 10-K (Standard Fiscal Year)	Detection of 10K forms.
Form 10-K (Non Standard Fiscal Year)	Detection of 10K forms for non-standard fiscal years (not ending at 31/12).
Form 10-Q (Standard Fiscal Year)	Detection of 10Q forms.
Form 10-Q (Non Standard Fiscal Year)	Detection of 10Q forms for non-standard fiscal years (not ending at 31/12).
French National Identity Card Number (CNI) Near Term (Default)	Detects 12-character French National Identity Card Numbers (CNI), near a permissive term in English or French. For example, "CNI: 130375300818".
French National Identity Card Number (CNI) Near Term (Narrow)	Detects 12-character French National Identity Card Numbers (CNI), near a term in English or French. For example, "French national identity card number: 130375300818".
French Social Security Number (NIR) - 13 Digits (Wide)	Detects 13-character French Social Security Numbers (NIR; AKA INSEE number), without check digits. For example, "2690549588157".
French Social Security Number (NIR) - 13 Digits Near Term	Detects 13-character French Social Security Numbers (NIR; AKA INSEE number), without check digits, near a term in English or French. For example, "NIR: 2690549588157".
French Social Security Number (NIR) - 15 Digits (Default)	Detects 15-character French Social Security Numbers (NIR; AKA INSEE number). At least 30% of such 15-character numbers in the text must be valid. For example, "2690549588157 80".
French Social Security Number (NIR) - 15 Digits (Wide)	Detects 15-character French Social Security Numbers (NIR; AKA INSEE number). For example, "2690549588157 80".
French Social Security Number (NIR) - 15 Digits Near Term	Detects 15-character French Social Security Numbers (NIR; AKA INSEE number) near a term in English or French. For example, "NIR: 2690549588157 80".
French Names	Detection of French full names.
German Names	Detection of German full names.
Greece: AFM number (Default)	Detection of at least one Greek AFM number with a term in proximity, or several AFM numbers with statistical validation.
Greece: AFM number (Wide)	Detection of Greek AFM number with no term approvement or statistical validation.
Greece: Greek ID number	Detection of Greek ID number.
Greece: Greek Name (Default)	Detection of Greek full name (default behavior).
Greece: Greek Name (Wide)	Detection of Greek full name (wide behavior).
Health Insurance Claim Number (HICN)	Detects Health Insurance Claim Number (HICN). For example: "427432010A".
Hong Kong: ID - formal	Detection of Hong Kong ID of the form A123456(7).
Hong Kong: ID - non formal	Detection of Hong Kong ID of the form A1234567, without requiring ID terms.
Hungary CNP	Detection of Hungary validated Personal Numeric Code Numbers when found in proximity to related terms.
Hungary CNP (Wide)	Detection of Hungary validated Personal Numeric Code Numbers.
Hungary SSN	Detection of Hungary Social Security Numbers, when found in proximity to related terms
Hungary SSN (Wide)	Detection of Hungary validated Social Security Numbers.
Hungary Tax ID	Detection of Hungary validated Tax ID Numbers when found in proximity to related terms.
Hungary Tax ID (Wide)	Detection of Hungary validated Tax ID Numbers.
IBAN Austria	Detection of Austrian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Austrian IBAN format.
IBAN Austria (Wide)	Detection of Austrian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Belgium	Detection of Belgian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Belgian IBAN format.
IBAN Belgium (Wide)	Detection of Belgian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Brazil	Detection of Brazilian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Brazilian IBAN format.
IBAN Brazil (Wide)	Detection of Brazilian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Bulgaria	Detection of Bulgarian International Bank Account Numbers (IBAN) near a support term.
IBAN Bulgaria (Wide)	Detection of Bulgarian International Bank Account Numbers (IBAN).
IBAN Croatia	Detection of Croatian International Bank Account Numbers (IBAN) near a support term.
IBAN Croatia (Wide)	Detection of Croatian International Bank Account Numbers (IBAN).
IBAN Cyprus	Detection of Cypriot International Bank Account Numbers (IBAN) near a support term.
IBAN Cyprus (Wide)	Detection of Cypriot International Bank Account Numbers (IBAN).
IBAN Czech Republic	Detection of Czech IBANs (International Bank Account Numbers). Searches for support terms in proximity to Czech IBAN format.
IBAN Czech Republic (Wide)	Detection of Czech IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Denmark	Detection of Danish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Danish IBAN format.
IBAN Denmark (Wide)	Detection of Danish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Estonia	Detection of Estonian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Estonian IBAN format.
IBAN Estonia (Wide)	Detection of Estonian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Finland	Detection of Finnish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Finnish IBAN format.
IBAN Finland (Wide)	Detection of Finnish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN France	Detection of French IBANs (International Bank Account Numbers). Searches for support terms in proximity to French IBAN format.
IBAN France (Wide)	Detection of French IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN General	Detection of general IBAN numbers.
IBAN Germany	Detection of German IBANs (International Bank Account Numbers). Searches for support terms in proximity to German IBAN format.
IBAN Germany (Wide)	Detection of German IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Greece	Detection of Greek IBANs (International Bank Account Numbers). Searches for support terms in proximity to Greek IBAN format.
IBAN Greece (Wide)	Detection of Greek IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Hungary	Detection of Hungarian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Hungarian IBAN format.
IBAN Hungary (Wide)	Detection of Hungarian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Iceland	Detection of Icelandic IBANs (International Bank Account Numbers). Searches for support terms in proximity to Icelandic IBAN format.
IBAN Iceland (Wide)	Detection of Icelandic IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Ireland	Detection of Irish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Irish IBAN format.
IBAN Ireland (Wide)	Detection of Irish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Italy	Detection of Italian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Italian IBAN format.
IBAN Italy (Wide)	Detection of Italian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Kazakhstan	Detection of Kazakh IBANs (International Bank Account Numbers). Searches for support terms in proximity to Kazakh IBAN format.
IBAN Kazakhstan (Wide)	Detection of Kazakh IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Latvia	Detection of Latvian International Bank Account Numbers (IBAN) near a support term.
IBAN Latvia (Wide)	Detection of Latvian International Bank Account Numbers (IBAN).
IBAN Lithuania	Detection of Lithuanian International Bank Account Numbers (IBAN) near a support term.
IBAN Lithuania (Wide)	Detection of Lithuanian International Bank Account Numbers (IBAN).
IBAN Luxembourg	Detection of Luxembourgian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Luxembourgian IBAN format.
IBAN Luxembourg (Wide)	Detection of Luxembourgian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Malta	Detection of Maltese International Bank Account Numbers (IBAN) near a support term.
IBAN Malta (Wide)	Detection of Maltese International Bank Account Numbers (IBAN).
IBAN Netherlands	Detection of Netherlands IBANs (International Bank Account Numbers). Searches for support terms in proximity to Netherlands IBAN format.
IBAN Netherlands (Wide)	Detection of Netherlands IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Norway	Detection of Norwegian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Norwegian IBAN format.
IBAN Norway (Wide)	Detection of Norwegian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Poland	Detection of Polish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Polish IBAN format.
IBAN Poland (Wide)	Detection of Polish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Portugal	Detection of Portuguese International Bank Account Numbers (IBAN) near a support term.
IBAN Portugal (Wide)	Detection of Portuguese International Bank Account Numbers (IBAN).
IBAN Qatar	Detection of Qatari IBANs (International Bank Account Numbers). Searches for support terms in proximity to Qatari IBAN format.
IBAN Qatar (Wide)	Detection of Qatari IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Romania	Detection of Romanian IBANs (International Bank Account Numbers). Searches for support terms in proximity to Romanian IBAN format.
IBAN Romania (Wide)	Detection of Romanian IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Saudi Arabia	Detection of Saudi Arabia IBANs (International Bank Account Numbers). Searches for support terms in proximity to Irish IBAN format.
IBAN Saudi Arabia (Wide)	Detection of Saudi Arabia IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Slovakia	Detection of Slovak IBANs (International Bank Account Numbers). Searches for support terms in proximity to Slovak IBAN format.
IBAN Slovakia (Wide)	Detection of Slovak IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Slovenia	Detection of Slovene International Bank Account Numbers (IBAN) near a support term.
IBAN Slovenia (Wide)	Detection of Slovene International Bank Account Numbers (IBAN).
IBAN Spain	Detection of Spanish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Spanish IBAN format.
IBAN Spain (wide)	Detection of Spanish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Sweden	Detection of Swedish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Swedish IBAN format.
IBAN Sweden (Wide)	Detection of Swedish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Switzerland	Detection of Swiss IBANs (International Bank Account Numbers). Searches for support terms in proximity to Swiss IBAN format.
IBAN Switzerland (Wide)	Detection of Swiss IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN Turkey	Detection of Turkish IBANs (International Bank Account Numbers). Searches for support terms in proximity to Turkish IBAN format.
IBAN Turkey (Wide)	Detection of Turkish IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN UK	Detection of UK IBANs (International Bank Account Numbers). Searches for support terms in proximity to UK IBAN format.
IBAN UK (Wide)	Detection of UK IBANs (International Bank Account Numbers) without support terms in proximity.
IBAN United Arab Emirates	Detection of Emirati IBANs (International Bank Account Numbers). Searches for support terms in proximity to Emirati IBAN format.
IBAN United Arab Emirates (Wide)	Detection of Emirati IBANs (International Bank Account Numbers) without support terms in proximity.
ICD-10 Code	Detects ICD-10 codes. For example "H05.121". This classifier may cause false positives.
ICD-10 Code Near Term	Detects ICD-10 codes near a term in English. For example "ICD Code: H05.121".
ICD10 Norwegian Descriptions	Detection of Norwegian descriptions of medical conditions as they appear in the ICD10 manual.
Icelandic Kennitala of Individuals (Default)	Detection of Icelandic identification numbers (kennitala) of individuals, employing various heuristics involving kennitala-related terms and other features unique to this number.
Icelandic Kennitala of Individuals (Wide)	Detection of Icelandic identification numbers (kennitala) of individuals, employing various heuristics involving features unique to this number.
IL bank accounts: Benleumi	Detection of validated BenLeumi account numbers in proximity to terms related to accounts in English or Hebrew.
IL bank accounts: Discount	Detection of validated Discount account numbers in proximity to terms related to accounts in English or Hebrew.
IL bank accounts: Hadoar	Detection of validated HaDoar account numbers, when appearing with terms relating to accounts in English or Hebrew.
IL bank accounts: Leumi	Detection of validated Leumi account numbers which include branch numbers, when appearing with terms relating to accounts in English or Hebrew.
IL bank accounts: Leumi no support	Detection of validated Leumi account numbers which include branch numbers.
IL bank accounts: Mizrahi	Detection of validated Mizrahi account numbers which include branch numbers, when appearing with terms relating to accounts in English or Hebrew.
IL bank accounts: Poalim	Detection of validated Poalim account numbers which include branch numbers, when appearing with terms relating to accounts in English or Hebrew.
IL Life Insurance	Detection of Israeli life insurance numbers.
IMEI (Default)	Detection of at least two validated IMEI numbers, delimited and non-delimited. Also locates IMEI related term somewhere in the document.
IMEI (Wide)	Detection of at least two validated IMEI numbers, delimited and non-delimited.
India: Form 16	Detection of India Form 16 that has been filled out, using identification of textual patterns common to such forms.
Indian Names (Default)	Detection of Indian full names.
Indian Names (Narrow)	Detection of Indian full names (Narrow).
Indian Names (Wide)	Detection of Indian full names (Wide). This content classifier should be used in conjunction with additional data as it is permissive.
Indonesian Single Identity Numbers (Default)	Detects valid 16-digit delimited or un-delimited Indonesian Single Identity Numbers (Nomor Induk Kependudukan). At least half of all 16-digit numbers need to be valid. For example "3313034604790001".
Indonesian Single Identity Numbers (Narrow)	Detects valid 16-digit delimited or un-delimited Indonesian Single Identity Numbers (Nomor Induk Kependudukan) where the last 4 digits are under 0400. At least half of all 16-digit numbers need to be valid. For example "3313034604790001".
Indonesian Single Identity Numbers Near Term	Detects valid 16-digit delimited or un-delimited Indonesian Single Identity Numbers (Nomor Induk Kependudukan) near a support term in English or in Indonesian. For example "nomor KTP 3313034604790001".
Ireland PRSI/PPS	Detection of Irish Personal Public Service numbers.
ISIN: Default	Detection of valid International Securities Identification Numbers (ISINs).
ISIN: with country code validation	Detection of valid International Securities Identification Numbers (ISINs), with validating country code.
Israel: Common Medical Information	Detection of medical conditions in Hebrew or English.
Israel: Sensitive Medical Information	Detection of medical conditions of sensitive nature in Hebrew or English.
Israeli Credit Cards	Detection of valid credit card number prevalent in Israel.
Israeli Credit Cards (Default)	Detection of Israeli credit card numbers (not including Isracard) employing various heuristics involving credit card related terms and use of delimiters. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Israeli Credit Cards (Narrow)	Detection of Israeli credit card numbers (not including Isracard). Requires additional evidence, such as credit card related terms in proximity, in order to qualify number as a credit card number. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Israeli Credit Cards (Wide)	Detection of potential Israeli credit card numbers (not including Isracard), based only on format and validation, may cause false positives. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Israeli IBAN	Detection of Israeli IBANs (International Bank Account Numbers). Searches for support terms in proximity to Israeli IBAN format.
Israeli IBAN (Wide)	Detection of Israeli IBANs (International Bank Account Numbers) without support terms in proximity.
Israeli Identity Number (Default)	Detects valid 9-digit Israeli identity numbers. At least 50% of the 9-digit numbers in the text need to be valid. For example: "064810948".
Israeli Identity Number Near Term	Detects valid 9-digit Israeli identity numbers near a support term in Hebrew, Arabic, or English. For example: "Teudat Zehut 064810948".
Israeli Identity Number (Wide)	Detects valid 9-digit Israeli identity numbers. For example: "064810948".
Israeli Identity Number - 7-Digits (Default)	Detects valid 7-digit Israeli identity numbers where the leftmost 2 digits, "00", are omitted. At least 50% of the 7-digit numbers in the text must be valid. For example: "9896747".
Israeli Identity Number (7-Digits) Near Term	Detects valid 7-digit Israeli identity numbers where the leftmost 2 digits, "00", are omitted near a support term in Hebrew, Arabic, or English. For example: "Teudat Zehut 9896747".
Israeli Identity Number - 7-Digits (Wide)	Detects valid 7-digit Israeli identity numbers where the leftmost 2 digits, "00", are omitted. For example: "9896747".
Israeli Identity Number - 8-Digits (Default)	Detects valid 8-digit Israeli identity numbers where the leftmost digit, "0", is omitted. At least 50% of the 8-digit numbers in the text must be valid. For example: "64810948".
Israeli Identity Number (8-Digits) Near Term	Detects valid 8-digit Israeli identity numbers where the leftmost digit, "0", is omitted near a support term in Hebrew, Arabic, or English. For example: "Teudat Zehut 64810948".
Israeli Identity Number - 8-Digits (Wide)	Detects valid 8-digit Israeli identity numbers where the leftmost digit, "0", is omitted. For example: "64810948".
Israeli Insurance Claims	Detection of Israeli life insurance claims numbers when appearing in proximity to related terms.
Israeli life Insurance	Detection of Israeli life insurance numbers when appearing in proximity to life insurance related terms.
Israeli Names	Detection of Israeli full names.
Israeli Phone Numbers (Default)	Detection of Israeli Phone Numbers, when found in proximity to related terms.
Israeli Phone Numbers (Wide)	Detection of Israeli Phone Numbers.
Israeli generic insurance number (delimited)	Detection of generic Israeli insurance policy numbers in standard delimitation
Israeli generic insurance number (non delimited)	Detection of generic Israeli insurance policy numbers without delimitation
Italian Address	Detects an Italian address in Italian or English. For example, "Piazzale degli Uffizi 6, 50122 Firenze".
Italian Names	Detection of Italian full names.
Italy Codice Fiscale Number	Detection of validated Italy Codice Fiscale, possibly in proximity to related terms.
Japan Emails	Detection of at least 20 email addresses revealing personal information about the owner, such as their full name and place of employment.
Japan Ledger	Detection of Japanese Ledger Number in proximity Ledger related terms. The terms and digits are detected in both English and Japanese.
Japan Pension	Detection of Japanese Pension Number in proximity to pension related terms. The terms and digits are detected in both English and Japanese.
Japan Phone Numbers	Detection of Japanese telephone numbers, where at least one number is in proximity to phone number related terms in English or Japanese.
Japanese Corporate Numbers (Wide)	Detects valid 13-digit delimited or un-delimited Japanese Corporate Numbers. For example "7-0000-1201-1012".
Japanese Corporate Numbers (Default)	Detects valid 13-digit delimited or un-delimited Japanese Corporate Numbers. At least 70% of all 13-digit numbers need to be valid. For example "7-0000-1201-1012".
Japanese Corporate Numbers Near Term	Detects valid 13-digit delimited or un-delimited Japanese Corporate Numbers near a support term in English or in Japanese. For example "Corporate Number 7-0000-1201-1012".
Japanese Credit Cards	Detection of valid credit card number prevalent in Japan, employing various heuristics involving credit card related terms and use of delimiters. The terms and credit card digits are detected in both English and Japanese.
Japanese Individual Numbers (Wide)	Detects valid 12-digit delimited or un-delimited Japanese Individual Numbers (My Numbers). For example "3591 0546 2229".
Japanese Individual Numbers (Default)	Detects valid 12-digit delimited or un-delimited Japanese Individual Numbers (My Numbers). At least 70% of all 12-digit numbers need to be valid. For example "3591 0546 2229".
Japanese Individual Numbers Near Term	Detects valid 12-digit delimited or un-delimited Japanese Individual Numbers (My Numbers) near a support term in English or Japanese. For example "My Number 3591 0546 2229".
JSON Keystore File Private Key	Detection of JSON Keystore File private keys that are used to hold Bitcoin's and Ethereum's wallet's private key information.
Kazakh Taxpayer Registration Numbers	Detection of valid Kazakh Taxpayer Registration Numbers.
Kazakh Individual Identification Numbers	Detection of valid Kazakh Individual Identification Numbers.
Kazakh Business Identification Numbers	Detection of valid Kazakh Business Identification Numbers.
Key Phrases in Header/Footer	Detection of user-defined, case-insensitive key phrases in the header or footer of documents. For example, the key phrase "secret" will be found in the text "Secretive and highly classified" and "TOP SECRET." The phrase list "secret, sensitive, private" will be found when any form of those phases are in header/footer text. Only the first phrase that is found shows as a violation trigger.
Korea Phone Numbers (Narrow)	Detection of Korea phone numbers, employing statistical analysis.
Korea Phone Numbers (Wide)	Detection of Korea phone numbers.
Korea Phone Numbers (With Support)	Detection of Korea phone numbers, when found in proximity to related terms such as 'phone' in English or Korean.
Latitude-Longitude coordinates	Detection of Latitude-Longitude coordinates.
Latvian Personal Identity Number (Wide)	Detects valid 11-digit Latvian personal identity numbers (Personas kods). For example: "281247-11862".
Latvian Personal Identity Number (Default)	Detects valid 11-digit Latvian personal identity numbers (Personas kods). At least 50% of the 11-digit numbers in the text must be valid. For example: "281247-11862".
Latvian Personal Identity Number Near Term	Detects valid 11-digit Latvian personal identity numbers (Personas kods) near a support term in Latvian or English. For example: "Personas kods 281247-11862".
Lithuanian Personal Code (Wide)	Detects valid 11-digit Lithuanian Personal Code (Asmens kodas). For example: "46709261415".
Lithuanian Personal Code (Default)	Detects valid 11-digit Lithuanian Personal Code (Asmens kodas). At least 50% of the 11-digit numbers in the text must be valid. For example: "46709261415".
Lithuanian Personal Code Near Term	Detects valid 11-digit Lithuanian Personal Code (Asmens kodas) near a support term in Lithuanian or English. For example: "Asmens kodas 46709261415".
Luxembourgian National Identification Number - 11 Digits (Wide)	Detects valid 11-digit Luxembourgian national identification numbers (Matricule). For example: "1994 01 27 087".
Luxembourgian National Identification Number - 11 Digits (Default)	Detects valid 11-digit Luxembourgian national identification numbers (Matricule). At least 50% of the 11-digit numbers in the text must be valid. For example: "1994 01 27 087".
Luxembourgian National Identification Number - 11 Digits Near Term	Detects valid 11-digit Luxembourgian national identification numbers (Matricule) near a support term in French, German, Luxembourgish, or English. For example: "Matricule 1994 01 27 087".
Luxembourgian National Identification Number - 13 Digits (Wide)	Detects valid 13-digit Luxembourgian national identification numbers (Matricule). For example: "1992 0311 426 93".
Luxembourgian National Identification Number - 13 Digits (Default)	Detects valid 13-digit Luxembourgian national identification numbers (Matricule). At least 50% of the 13-digit numbers in the text must be valid. For example: "1992 0311 426 93".
Luxembourgian National Identification Number - 13 Digits Near Term	Detects valid 13-digit Luxembourgian national identification numbers (Matricule) near a support term in French, German, Luxembourgish, or English. For example: "Matricule 1992 0311 426 93".
MAC Address (Default)	Detection of MAC addresses. Detects only delimited MAC addresses.
MAC Address (Narrow)	Detection of MAC addresses, detects delimited MAC addresses with a valid OUI (Organizationally Unique Identifier).
MAC Address (Wide)	Detection of MAC addresses. Detects delimited MAC addresses and non-delimited MAC addresses with support terms in proximity.
Malaysia ID: no date validation	Detection of validated Malaysia ID in a form like dddddd-16-7356. Does not require support term in proximity.
Malaysia ID: no date validation, with proximity	Detection of validated Malaysia ID in a form like dddddd-16-7356 providing that Malaysia ID terms such as MyKad, GMPC or ID appears in proximity.
Malaysia ID: with date and BP validation	Detection of validated Malaysia ID in a form like YYMMDD-BP-7356, where first six digits stand for a birth date. Does not require support term in proximity.
Malaysia ID: with date and BP validation, with proximity	Detection of validated Malaysia ID in a form like dddddd-BP-7356, providing that Malaysia ID terms such as MyKad, GMPC or ID appears in proximity.
Malaysia ID: with date validation	Detection of validated Malaysia ID in a form like YYMMDD-16-7356, where first six digits stand for a birth date. Does not require support term in proximity.
Malaysia ID: with date validation, with proximity	Detection of validated Malaysia ID in a form like YYMMDD-16-7356, where first six digits stand for a birth date, providing that Malaysia ID terms such as MyKad, GMPC or ID appears in proximity.
Malicious Concealment	Detection of content suspected to be manipulated (e.g. by replacing letters with symbols) to avoid detection, using methods such as statistical analysis.
Malicious Concealment (Narrow)	Detection of content suspected to be manipulated (e.g. by replacing letters with symbols) to avoid detection, using methods such as statistical analysis.
Malicious Concealment (Wide)	Detection of content suspected to be manipulated (e.g., by replacing letters with symbols) to avoid detection, using methods such as statistical analysis. May cause false positives.
Malicious Concealment: L33T	Detection of content suspected to be manipulated using "L33T" manipulation.
Malicious Concealment: L33T (Narrow)	Detection of content suspected to be manipulated using "L33T" manipulation.
Malicious Concealment: L33T (Wide)	Detection of content suspected to be manipulated using "L33T" manipulation, may cause false positives.
Malicious Concealment: Reversed Text	Detection of content suspected to be manipulated as reversing the text.
Malicious Concealment: Reversed Text (Narrow)	Detection of content suspected to be manipulated as reversing the text.
Malicious Concealment: Reversed Text (Wide)	Detection of content suspected to be manipulated as reversing the text, may cause false positives.
Malicious Concealment: ROT13	Detection of content suspected to be manipulated using "ROT13" manipulation.
Malicious Concealment: ROT13 (Narrow)	Detection of content suspected to be manipulated using "ROT13" manipulation.
Malicious Concealment: ROT13 (Wide)	Detection of content suspected to be manipulated using "ROT13" manipulation, may cause false positives.
Malicious Concealment: Upside Down Text	Detection of content suspected to be manipulated using "upside down" manipulation.
Malicious Concealment: Upside Down Text (Narrow)	Detection of content suspected to be manipulated using "upside down" manipulation.
Malicious Concealment: Upside Down Text (Wide)	Detection of content suspected to be manipulated using "upside down" manipulation, may cause false positives.
Maltese Identity Card Number Near Term	Detects Maltese identity card numbers near a support term in Maltese or English. For example: "Identity Card Number 19999981M".
Malware (Default)	Identifies HTTP/S transactions that are suspected to be malicious, based, for example, on web category, destination URL structure, and a mathematical analysis of data. This rule is not selected by default. Applies only when Forcepoint Web Security is installed. Administrator tuning of the rule, for example, by excluding specific destinations, is recommended.
Malware (Strict) (Uncategorized)	Identifies HTTP/S transactions that are suspected to be malicious, based, for example, on web category, destination URL structure, and a mathematical analysis of data. This rule is not selected by default. Applies only when Forcepoint Web Security is installed. Administrator tuning of the rule, for example, by excluding specific destinations, is recommended.
MAR: Actuary Reports	Detection of documents contain actuary reports (in attachments or files).
Maximum Age (Wide)	Detection of numbers less than or equal to a user-specified threshold in proximity to an age-related term, or date of birth under the specified threshold. Default age is 13.
Maximum Age (Default)	Detection of age-related phrases containing numbers less than or equal to a user-specified threshold or date of birth under the specified threshold. Default age is 13.
Minimum Age (Wide)	Detection of numbers greater than or equal to a user-specified threshold in proximity to an age-related term, or date of birth under the specified threshold. Default age is 13.
Minimum Age (Default)	Detection of age-related phrases containing numbers greater than or equal to a user-specified threshold or date of birth under the specified threshold. Default age is 13.
Mexican Names	Detection of full names (Wide). This content classifier should be used in conjunction with additional data as it is permissive.
Mexican Passport Number Near Term (Default)	Detects Mexican passport numbers, near a term in Spanish or English. Mexican passport numbers consist of 11 digits or of a letter followed by 8 digits. For example, "Passport number: 07460075411".
Mexican Passport Number Near Term (Wide)	Detects case-insensitive Mexican passport numbers, near a permissive term in Spanish or English. Mexican passport numbers consist of 11 digits or of a letter followed by 8 digits. For example, "Passport: 07460075411".
Mexican Social Security Number (NSS) (Default)	Detects valid 11-digit Mexican Social Security Number (NSS). At least 30% of the 11-digit numbers in the text must be valid. For example: "7491761007-8".
Mexican Social Security Number (NSS) (Wide)	Detects valid 11-digit Mexican Social Security Number (NSS). For example: "7491761007-8".
Mexican Social Security Number (NSS) Near Term	Detects valid 11-digit Mexican Social Security Number (NSS), near a support term in Spanish or English. For example: "Numero del Seguro Social 7491761007-8".
Mexican Standardized Bank Code (CLABE) (Default)	Detects valid 18-digit Mexican Standardized Bank Code (CLABE), containing an assigned bank code and branch office code. At least 30% of the 18-digit numbers in the text must be valid. For example: "072 680 005439760704".
Mexican Standardized Bank Code (CLABE) (Wide)	Detects valid 18-digit Mexican Standardized Bank Code (CLABE). For example: "000180000404040406".
Mexican Standardized Bank Code (CLABE) Near Term	Detects valid 18-digit Mexican Standardized Bank Code (CLABE), containing an assigned bank code and branch office code, near a support term in Spanish or English. For example: "CLABE 072 680 005439760704".
Mexico CURP (Clave Unica de Registro de Poblacion)	Detection of Contract Nomenclature of CPISP (Clave Personal Interna del Servidor Publico).
Mexico RFC Number (Default)	Detection of Mexico RFC numbers, employing various heuristics involving RFC related terms and homoclaves.
Mexico RFC Number (Wide)	Detection of Mexico RFC numbers, without requiring homoclave or RFC term in proximity.
National Drug Code (Default)	Detection of National Drug Code (NDC) numbers of prescription drugs. Undelimited numbers are subjected to statistical validation.
National Drug Code (Narrow)	Detection of at least one delimited number or 5 undelimited National Drug Code (NDC) numbers of prescription drugs, using statistical validation.
National Drug Code (Wide)	Detection of National Drug Code (NDC) numbers of prescription drugs. All instances are returned and no further check is made, may cause false positives.
National Register of Legal Entities Number (Wide)	Detects valid 14-digit Brazilian National Register of Legal Entities Numbers (CNPJ). For example: "05.211.592/0001-04".
National Register of Legal Entities Number (Default)	Detects valid 14-digit Brazilian National Register of Legal Entities Numbers (CNPJ). At least 50% of the 14-digit numbers in the text must be valid. For example: "05.211.592/0001-04".
National Register of Legal Entities Number Near Term	Detects valid 14-digit Brazilian National Register of Legal Entities Numbers (CNPJ) near a support term in Portuguese or English. For example: "CNPJ 05.211.592/0001-04".
Netherlands: Bank Account	Detection of Elfproef validated Dutch Bank Account numbers.
Netherlands: Citizen Service Number	Detection of Dutch Citizen Service Numbers (Burgerservicenummers or BSNs), in proximity to related terms.
Netherlands: Sofinummer	Detection of validated Netherlands Sofinummers, in proximity to related terms.
New Zealand NHI - no support	Detection of validated NHI Numbers, does not demand further evidence.
NHS Numbers (Default)	Detection of validated NHS numbers.
NHS Numbers (Narrow)	Detection of validated NHS numbers. Requires additional evidence, such as NHS related terms in proximity.
NHS Numbers (Wide)	Detection of all forms of valid NHS numbers.
Norway Personnummer	Detection of Norway Personal Numbers (personnummer), including d-numbers, possibly in proximity to related terms.
Norwegian Names	Detection of Norwegian full names.
OpenSSH Private Key	Detection of OpenSSH private keys. The first line of the key contains the string "BEGIN OPENSSH PRIVATE KEY".
Password (Default)	Detection of 8-25-character strings consisting of at least one letter and at least one digit or special characters that are not followed by a file extension. For example: "Qwerty1234".
Password (Wide)	Detection of 6-25-character strings consisting of 1) at least one letter and at least one digit or special characters that are not followed by a file extension, or 2) two to three repeated alphanumeric strings, or 3) common passwords. For example: "Qwerty1", "abcabc" or "letmein".
Password Files	Detection of password files.
Password Files (Wide)	Detection of password files.
Password Near Term (Default)	Detection of password-related terms near 8-25-character strings consisting of at least one letter and at least one digit or special characters that are not followed by a file extension. For example: "Qwerty1234". the term can be in Arabic, Chinese, Czech, Danish, Dutch, English, Finnish, French, Galician, German, Greek, Hebrew, Indonesian, Japanese, Korean, Norwegian, Portuguese, Russian, Slovak, Spanish, Swedish, Thai, Turkish, or Vietnamese.
Password Near Term (Wide)	Detection of password-related terms near 6-25-character strings consisting of 1) at least one letter and at least one digit or special characters that are not followed by a file extension, or 2) two to three repeated alphanumeric strings, or 3) common passwords. For example: "The Password is Qwerty1", "das Passwort ist abcabc" or "pwd - letmein". The term can be in Arabic, Chinese, Czech, Danish, Dutch, English, Finnish, French, Galician, German, Greek, Hebrew, Indonesian, Japanese, Korean, Norwegian, Portuguese, Russian, Slovak, Spanish, Swedish, Thai, Turkish, or Vietnamese.
Passwords - common passwords without term	Detection of common passwords (based on various common passwords lists) with or without trailing digits. No term is required in proximity. The minimal number of passwords is configurable through the parameter.
PCI Audit: CCN with CVV	Detection of valid credit cards near CVV.
PCI Audit: CCN with Expiration Date	Detection of valid credit cards near expiration dates.
PCI Audit: Masked Credit Cards	Detection of masked American Express, Discover, JCB, MasterCard, and Visa credit cards.
PCI Audit: Non-Delimited CCNs with no word boundaries	Detection of possible non-delimited credit card numbers, with no word boundaries.
PCI Audit: Non-Delimited Credit Card Numbers	Detection of valid non-delimited credit card numbers. May cause false positives.
PCI Audit: User-Defined CCN Delimiter	Detection of potential credit-card-numbers, possible delimiters can be added by the user, default delimiter is "-".
People's Republic of China Identification Numbers	Detection of validated People's Republic of China Identification Numbers.
People's Republic of China Passport Number Near Term (Default)	Detects 9-character People's Republic of China passport numbers consisting of "D", "E", "G", "P" or "S" followed by 8 digits, near a term in Chinese or English. For example, "Passport: G45969933".
People's Republic of China Passport Number Near Term (Narrow)	Detects 9-character People's Republic of China passport numbers consisting of "D", "E", "G", "P" or "S" followed by 8 digits, near a strict term in Chinese or English. For example, "Passport No. G45969933".
Perl Source Code (By Content)	Detection of Perl source code by content.
Peruvian RUC of Individuals (Near Term)	Detects valid 11-digit Unique Taxpayer Registration Number (RUC) of Individuals near a support term in Spanish or English. For example: "RUC 10328503480".
Peruvian RUC of Individuals (Wide)	Detects valid 11-digit Unique Taxpayer Registration Number (RUC) of Individuals. For example: "10328503480".
Peruvian RUC of Non-Individuals (Near Term)	Detects valid 11-digit Unique Taxpayer Registration Number (RUC) of non-Individuals near a support term in Spanish or English. For example: "RUC 20519354111".
Peruvian RUC of Non-Individuals (Wide)	Detects valid 11-digit Unique Taxpayer Registration Number (RUC) of non-Individuals. For example: "20519354111".
Peruvian Unique Identification Code (CUI) (Default)	Detects valid 9-digit Peruvian Unique Identification Codes (CUI). At least 40% of the 9-digit numbers in the text must be valid. For example: "42158455-4".
Peruvian Unique Identification Code (CUI) (Wide)	Detects valid 9-digit Peruvian Unique Identification Codes (CUI). For example: "42158455-4".
Peruvian Unique Identification Code (CUI) Near Term (Default)	Detects valid 9-digit Peruvian Unique Identification Codes (CUI), near a support term in Spanish or English. For example: "CUI 42158455-4".
Peruvian Unique Identification Code (CUI) Near Term (Narrow)	Detects valid 9-digit Peruvian Unique Identification Codes (CUI), near a support term in Spanish or English. At least 40% of the 9-digit numbers in the text must be valid. For example: "CUI 42158455-4".
PGP Private Key	Detection of PGP private keys. The first line of the key contains the string "BEGIN PGP PRIVATE KEY BLOCK".
PhilHealth Identification Number (Wide)	Detects valid 12-digit Philippine PhilHealth Identification Numbers. For example: "12-000015726-6"".
PhilHealth Identification Number (Default)	Detects valid 12-digit Philippine PhilHealth Identification Numbers. At least 50% of the 12-digit numbers in the text must be valid. For example: "12-000015726-6".
PhilHealth Identification Number Near Term	Detects valid 12-digit Philippine PhilHealth Identification Numbers near a support term in English. For example: "PhilHealth# 12-000015726-6".
Philippine SSS Number (Wide)	Detects valid 10-digit Philippine SSS numbers. For example: "06-1739315-5".
Philippine SSS Number (Default)	Detects valid 10-digit Philippine SSS numbers. At least 30% of the 10-digit numbers in the text must be valid. For example: "06-1739315-5".
Philippine SSS Number Near Term	Detects valid 10-digit Philippine SSS numbers near a support term in English. For example: "SSS: 06-1739315-5".
Philippine Taxpayer Identification Number (Wide)	Detects valid 9- or 12-digit Philippine taxpayer identification numbers (TINs). For example: "000 063 471".
Philippine Taxpayer Identification Number (Default)	Detects valid 9- or 12-digit Philippine taxpayer identification numbers (TINs). At least 30% of the 9- and 12-digit numbers in the text must be valid. For example: "000 063 471".
Philippine Taxpayer Identification Number Near Term	Detects valid 9- or 12-digit Philippine taxpayer identification numbers (TINs) near a support term in English. For example: "T.I.N. 000 063 471".
Philippines Address (Default)	Detection of Philippines address (default behavior).
Philippines Address (Narrow)	Detection of Philippines address, tuned to minimize false positives (may cause false negatives).
PIN with proximity	Detection of personal identification numbers (PINs) in proximity to a PIN-related term.
PKCS #1 Private Key	Detection of PKCS #1 private keys, also known as SSLeay private keys. The first line of the key contains the string "BEGIN RSA PRIVATE KEY".
Poland: ID	Detection of Polish Identification numbers.
Poland: NIP Number	Detection of Polish NIP numbers.
Poland: PESEL Number	Detection of Polish Pesel numbers.
Poland: REGON Number	Detection of REGON numbers.
Portuguese Document Number (Wide)	Detects valid 12-digit Portuguese Document Numbers or 11-digit numbers where the leftmost digit, "0", is omitted. For example: "13965280 9ZZ5".
Portuguese Document Number (Default)	Detects valid 12-digit Portuguese Document Numbers or 11-digit numbers where the leftmost digit, "0", is omitted. At least 30% of the 12- or 11-digit numbers in the text must be valid. For example: "13965280 9ZZ5".
Portuguese Document Number Near Term	Detects valid 12-digit Portuguese Document Numbers or 11-digit numbers where the leftmost digit, "0", is omitted near a support term in Portuguese or English. For example: "n documento 13965280 9ZZ5".
Portuguese Social Security Number (Wide)	Detects valid 11-digit Social Security Numbers (NISS). For example: "25092822330".
Portuguese Social Security Number (Default)	Detects valid 11-digit Social Security Numbers (NISS). At least 30% of the 11-digit numbers in the text must be valid. For example: "25092822330".
Portuguese Social Security Number Near Term	Detects valid 11-digit Social Security Numbers (NISS) near a support term in Portuguese or English. For example: "NISS 25092822330".
Portuguese Tax Identification Number of Individuals (Wide)	Detects valid 9-digit Portuguese Tax Identification Numbers (NIF) of Individuals. For example: "113469160".
Portuguese Tax Identification Number of Individuals (Default)	Detects valid 9-digit Portuguese Tax Identification Numbers (NIF) of Individuals. At least 30% of the 9-digit numbers in the text must be valid. For example: "113469160".
Portuguese Tax Identification Number of Individuals Near Term	Detects valid 9-digit Portuguese Tax Identification Numbers (NIF) of Individuals near a support term in Portuguese or English. For example: "N.I.F. 113469160".
PRC Business Registration Numbers - 15 digits (default)	Detection of People's Republic of China's 15 digits Business Registration Numbers (default behavior).
PRC Business Registration Numbers - 15 digits (narrow)	Detection of People's Republic of China's 15 digits Business Registration Numbers (narrow behavior).
PRC Business Registration Numbers - 15 digits (wide)	Detection of People's Republic of China's 15 digits Business Registration Numbers (wide behavior).
Proximity Classifier	This classifier is looking for two elements in proximity (determined by the user) to each other. Classifier has three parameters as input. "First Element" and "Second Element" determines the values to be searched, you can write a keyword or a regexp. The parameter "Proximity In Characters" determines the number of characters to look before and after matches of first element.
Python Source Code (Wide)	Detection of Python source code. At least 50 percent of the non-empty lines in the file should be valid Python lines and at least 1 unmistakable Python line should be detected.
Python Source Code (Default)	Detection of Python source code. At least 70 percent of the non-empty lines in the file should be valid Python lines and at least 4 unmistakable Python lines should be detected.
Questionable Image	Detection of nudity images.
Romania - ID	Detection of validated Romanian ID numbers.
Routing Number (Default)	Detection of issued RTNs, includes advanced statistical heuristics.
Routing Number (Narrow)	Detection of issued RTNs, includes advanced statistical heuristics and search for support terms.
Routing Number (Wide)	Detection of issued RTNs.
Russian Classification on Objects of Administrative Division (with check digit)	Detection of Russian Classification on Objects of Administrative Division (with check digit).
Russian Classification on Objects of Administrative Division (without check digit)	Detection of Russian Classification on Objects of Administrative Division (without check digit).
Russian Personal Pension Account Number (SNILS)	Detection of Russian Individual personal pension account numbers (SNILS).
Russian Moscow Social Card number (SOCCARD)	Detection of Russian Moscow Social Card (SOCCARD)
Russian Moscow Social Card serial number	Detection of Russian Moscow Social Card (SOCCARD)
Russian Names (Default)	Detection of Russian full names.
Russian Names (Narrow)	Detection of Russian full names.
Russian Names (Wide)	Detection of Russian full names.
Russian Passport Spreadsheet	Detection of Russian passport numbers in spreadsheet files.
Russian Primary State Registration numbers (13 digits)	Detection of 13 digits Russian Primary State Registration numbers
Russian Primary State Registration numbers (15 digits)	Detection of 15 digits Russian Primary State Registration numbers
Russian Taxpayer Identification numbers validator (10 digits)	Detection of 10 digits Russian Taxpayer Identification numbers
Russian Taxpayer Identification numbers validator (12 digits)	Detection of 12 digits Russian Taxpayer Identification numbers
Russian Unified Classifier of Enterprises and Organizations	Detection of Russian Unified Classifier of Enterprises and Organizations number.
Security Accounts Manager (SAM) Files	Detection of SAM files according to internal file properties.
Security Accounts Manager (SAM) Files - Textual (Wide)	Detection of SAM textual files.
Security Accounts Manager (SAM) Files - Textual (Default)	Detection of SAM textual files. All lines in the file should be valid hash lines. Characters statistical analysis is used when parts of a string are repeated, indicating the likelihood of an unintended match.
Security Accounts Manager (SAM) Files - Textual (Narrow)	Detection of SAM textual files. All lines in the file should be valid hash lines. At least 4 lines are needed in order to have a match. Characters statistical analysis is used when parts of a string are repeated, indicating the likelihood of an unintended match.
Shadow Files	Detection of shadow files
Shadow Files (Wide)	Detection of shadow files
SIN (Default)	Detection of valid Canadian social insurance numbers, employing context sensitive lexical analysis, statistical analysis of patterns and custom dictionaries.
SIN (Narrow)	Restricted detection of valid Canadian social insurance numbers, tuned in order to minimize false positives. Requires additional evidence, such as SIN related terms (English or French) in proximity.
SIN (Wide)	Permissive detection of valid Canadian social insurance numbers. Does not require support term in proximity.
SIN: with proximity	Detection of valid Canadian social insurance numbers, in proximity to social insurance related terms in English or French.
Singapore Addresses (Default)	Detection of Singapore addresses
Singapore Addresses (Narrow)	Detection of Singapore addresses in the most formal form
Singapore ID	Detection of Singapore NRIC, UIN and FIN identification numbers. Does not require identification related terms in proximity.
Singapore ID with support	Detection of Singapore NRIC, UIN and FIN identification numbers, in proximity to identification related terms.
Singaporean Phone Numbers (Default)	Detection of Singaporean phone numbers.
Singaporean Phone Numbers (Narrow)	Detection of Singaporean phone numbers, employing statistical analysis.
Slovak and Czech Birth Numbers Near Term	Detects valid 9- or 10-digit delimited or un-delimited Slovak and Czech birth numbers (Rodne Cislo) near a support term. For example "Rodne Cislo 8501306605".
Slovak and Czech Birth Numbers (Wide)	Detects valid 9- or 10-digit delimited or un-delimited Slovak and Czech birth numbers (Rodne Cislo). For example "450819001".
Source Code: C or JAVA	Detection of source code content written in C, C++, C# or Java, using lexical analysis of terms, patterns and structures for optimal accuracy.
Source Code: C or JAVA (Wide)	Detection of files which are suspicious to be a source code content - written in C, C++, C# or Java, using lexical analysis of terms, patterns and structures.
Source Code: Verilog	Detection of Verilog source code, using lexical analysis of terms, patterns and structures for optimal accuracy.
South Africa ID Number (Default)	Detection of valid 13-digit South African ID numbers. At least 30% of the 13-digit numbers in the text must be valid. For example: "2001014800086".
South Africa ID Number (Near Term)	Detection of valid 13-digit South African ID numbers near a support term in English. For example: "ID number 2001014800086".
South Africa ID Number (Wide)	Detection of valid 13-digit South African ID numbers. For example: "2001014800086".
South Korea ID	Detection of validated South Korea ID in a form like dddddd-ddddddd.
South Korea ID - Wide	Detection of validated South Korea ID, both delimited and non-delimited.
Spain: DNI Number	Detection of Spain DNIs, in proximity to related terms.
Spain: DNI Number (Wide)	Detection of Spain DNIs.
Spanish Address	Detection of Spanish addresses composed of address support terms in English or Spanish and a house number.
Spanish Foreigner's Identification Number (NIE) (Default)	Detects valid 9-character Spanish Foreigner's Identification Number (NIE) consisting of "X", "Y", or "Z" followed by 7 digits and a letter. At least 30% of such 9-character strings in the text must be valid. For example: "X4554667T".
Spanish Foreigner's Identification Number (NIE) (Wide)	Detects valid 9-character Spanish Foreigner's Identification Number (NIE) consisting of "X", "Y", or "Z" followed by 7 digits and a letter. For example: "X4554667T".
Spanish Foreigner's Identification Number (NIE) Near Term	Detects valid 9-character Spanish Foreigner's Identification Number (NIE) consisting of "X", "Y", or "Z" followed by 7 digits and a letter, near a support term in Spanish or English. For example: "N.I.E: X4554667T".
Spanish Passports	Detection of Spanish Passport numbers (2 letters preceded by 6 numbers) with a support term in proximity.
Spanish Phone Numbers	Detection of Spanish Phone Numbers with 9 or 11 digits, start with 6 or 9 for 9 digits, and 346 or 349 for 11 digits. Supported delimitations are in the following format: ddd-ddd-ddd, ddd ddd ddd, ddddddddd, dd-ddd-ddd-ddd, dd ddd ddd ddd, or ddddddddddd.
Spanish Phone Numbers (Wide)	Detection of Spanish Phone Numbers with 9 or 11 digits, start with 6 or 9 for 9 digits, and 346 or 349 for 11 digits. Supported delimitations are in the following format: ddd-ddd-ddd, ddd ddd ddd, ddddddddd, dd-ddd-ddd-ddd, dd ddd ddd ddd, or ddddddddddd. Note: This classifier may cause false positive and not recommended for use.
Spanish Social Security Number (Default)	Detects valid 12-digit Social Security Numbers (NUSS). At least 30% of the 12-digit numbers in the text must be valid. For example: "28 10497854 66".
Spanish Social Security Number (Wide)	Detects valid 11- or 12-digit Social Security Numbers (NUSS). For example: "28 10497854 66".
Spanish Social Security Number (Near Term)	Detects valid 11- or 12-digit Social Security Numbers (NUSS). near a support term in Spanish or English. For example: "Numero de Seguridad Social 28 10497854 66".
Spanish Tax Identification Code (CIF) (Default)	Detects valid 9-character Spanish Tax Identification Code consisting of "A" to "H", "J", "N", "P" to "S", or "U" to "W" followed by 7 digits and a letter. At least 30% of such 9-character strings in the text must be valid. For example: "G59135723".
Spanish Tax Identification Code (CIF) (Wide)	Detects valid 9-character Spanish Tax Identification Code consisting of "A" to "H", "J", "N", "P" to "S", or "U" to "W" followed by 7 digits and a letter. For example: "G59135723".
Spanish Tax Identification Code (CIF) Near Term	Detects valid 9-character Spanish Tax Identification Code consisting of "A" to "H", "J", "N", "P" to "S", or "U" to "W" followed by 7 digits and a letter, near a support term in Spanish or English. For example: "C.I.F: G59135723".
Spanish Tax Identification Number (NIF) (Default)	Detects valid 9-character Spanish Tax Identification Number (NIF) consisting of "K", "L", or "M" followed by 7 digits and a letter. At least 30% of such 9-character strings in the text must be valid. For example: "M1192884C".
Spanish Tax Identification Number (NIF) (Wide)	Detects valid 9-character Spanish Tax Identification Number (NIF) consisting of "K", "L", or "M" followed by 7 digits and a letter. For example: "M1192884C".
Spanish Tax Identification Number (NIF) Near Term	Detects valid 9-character Spanish Tax Identification Number (NIF) consisting of "K", "L", or "M" followed by 7 digits and a letter, near a support term in Spanish or English. For example: "N.I.F: M1192884C".
SPSS data files: sps	Detection of SPSS (.sps) text files.
SQL Detection (Default)	Detection of SQL queries (default behavior)
SQL Detection (Narrow)	Detection of SQL queries (narrow behavior)
SQL Detection (Wide)	Detection of SQL queries (wide behavior)
SSH2 Private Key	Detection of encrypted and non-encrypted SSH2 private keys. The first line of the key contains the string "BEGIN SSH2 PRIVATE KEY" or "BEGIN SSH2 ENCRYPTED PRIVATE KEY".
STL Textual Format	Detection of 3D Systems STL textual CAD files.
Suspected Mail to Self	Detection of similar names in the source and destination of email addresses. Should be used with an AND condition together with the relevant type of sensitive information.
Sweden ID - no support	Detection of validated Personal Identity Numbers, does not demand further evidence.
Swedish Names	Detection of Swedish full names.
Swedish Names (Narrow)	Detection of Swedish full names (Narrow).
Swedish Names (Wide)	Detection of Swedish full names (Wide). This content classifier should be used in conjunction with additional data because it is permissive.
Taiwan address (default)	Detection of Taiwan address (common street names and county names in English or Chinese) with address support term.
Taiwan address (narrow)	Detection of Taiwan address (common street names and county names in English or Chinese) with address support term in proximity.
Taiwan address (wide)	Detection of Taiwan address (common street names and county names in English or Chinese)
Taiwan ID	Detection of validated Taiwan ID of the form A123456789.
Taiwan ID with support	Detection of validated Taiwan ID of the form A123456789, providing that Taiwan ID terms in English or Chinese appears in proximity.
Taiwan PII: Birthday	Detection of Taiwan birthdays.
Taiwan PII: Marital Status	Detection of Taiwan marital status.
Taiwan PII: Passport Numbers	Detection of passport numbers.
Textual PPK Private Key	Detection of textual PPK private keys. The first line of the key contains the string "PuTTY-User-Key-File".
Thailand ID number (Default)	Detection of at least 1 Thai ID number with support terms.
Thailand ID number (Wide)	Detection of at least 1 Thai ID number without support terms.
Time Of Day - general 1	Return 'True' if the current time is after the time specified as the 'from time', and before the 'to time'. The hours are configurable in the classifier's parameters. You can update the from and to hours by editing the classifier. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Time Of Day - general 2	Return 'True' if the current time is after the time specified as the 'from time', and before the 'to time'. The hours are configurable in the classifier's parameters. You can update the from and to hours by editing the classifier. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Time Of Day - general 3	Return 'True' if the current time is after the time specified as the 'from time', and before the 'to time'. The hours are configurable in the classifier's parameters. You can update the from and to hours by editing the classifier. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Time Of Day - Outside Working Hours	Return 'True' if the current time falls between the times specified as Outside working hours (the default values for Outside working hours are from 5 PM to 8 AM). The hours are configurable in the classifier's parameters. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Time Of Day - Working Hours	Return 'True' if the current time falls between the times specified as working hours (the default values for working hours are from 8 AM to 5 PM). The hours are configurable in the classifier's parameters. This classifier can be used to create a rule that is valid in the working hours as determined by the user.
Turkey PII in Spreadsheets	Detection of spreadsheets containing Turkish personally identifiable information (PII) by looking for column headers related to information such as full name, address, citizenship number, etc.
Turkey TC Kimlik	Detection of validated Turkish Citizenship numbers (TC Kimlik), when appearing in proximity to TC Kimlik related terms in English, Turkish and other European languages.
Turkish Tax IDs	Detection of validated Turkish Tax ID Numbers given by government to persons or companies.
UK Driver Number (Default)	Detection of UK Driver Numbers with support terms.
UK Driver Number (Wide)	Detection of UK Driver Numbers.
UK Names (Default)	Detection of UK full names.
UK Names (Narrow)	Detection of UK full names (Narrow).
UK Names (Wide)	Detection of UK full names (Wide). This content classifier should be used in conjunction with additional data as it is permissive.
UK Voter Number	Detection of UK electoral roll numbers in proximity to related terms.
Uncategorized URL Detection	Detection of uncategorized or suspicious destination URLs. This uses the URL categories list. Applies only when Forcepoint Web Security and Linking Service are installed.
Unencrypted PKCS #8 Private Key	Detection of unencrypted PKCS #8 private keys. The first line of the key contains the string "BEGIN PRIVATE KEY".
Union Pay Credit Cards (Default)	Detection of Union Pay credit card numbers employing various heuristics involving credit card related terms and use of delimiters. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Union Pay Credit Cards (Narrow)	Detection of Union Pay credit card numbers. Requires additional evidence, such as credit card related terms in proximity, in order to qualify number as a credit card number. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Union Pay Credit Cards (Wide)	Detection of potential Union Pay credit card numbers, based only on format and validation, may cause false-positives. By default, only the first 4 digits and the last 4 digits are shown in the reports.
Unique Master Citizen Number (Wide)	Detects valid 13-digit Unique Master Citizen Numbers. For example "0801977505006".
Unique Master Citizen Number (Default)	Detects valid 13-digit Unique Master Citizen Numbers. At least half of the 13-digit numbers in the text need to be valid. For example "0801977505006".
Unique Master Citizen Number Near Term	Detects valid 13-digit Unique Master Citizen Numbers near a support term. For example "Unique Master Citizen Number 0801977715000".
Unusual Hours	Detects the transaction time as 'unusual hour' if the current time falls between the times specified as parameters for this classifier. The default values for unusual hours are from 21:00 (9 PM) to 5:00 (5 AM). The 'First working day' and 'Last working day' define the working day range. Transactions that are out of the working days are detected by this classifier regardless of their time.
URL category detection	Uses the inspected URL category as a classifier in the rule's condition.
US Address	Detection of US address.
US Medicare Beneficiary Identifier (MBI)	Detects 11-character Medicare Beneficiary Identifier (MBI). For example: "1EG4-TE5-MK73".
US Medicare Beneficiary Identifier (MBI) Near Term	Detects 11-character Medicare Beneficiary Identifier (MBI), near a support term in Spanish or English. For example: "MBI 1EG4-TE5-MK73".
US Names - default	Detection of full names.
US Names - narrow	Detection of full names (Narrow).
US Names - wide	Detection of full names (Wide). This content classifier should be used in conjunction with additional data as it is permissive.
US Passport Number Near Term (Default)	Detects US passport numbers or passport card numbers, near a term in English or Spanish. US passport numbers are 9 digits and passport card numbers consist of the letter "C" followed by 8 digits. For example, "Passport number: 340020014".
US Passport Number Near Term (Wide)	Detects case-insensitive US passport numbers or passport card numbers, near a permissive term in English or Spanish. US passport numbers are 9 digits and passport card numbers consist of the letter "C" followed by 8 digits. For example, "Passport: 340020014".
US Phone Numbers	Detection of US phone numbers.
US SSN (Audit)	A permissive classifier for detecting potential social security numbers, possibly with a non-standard delimitation or without definite boundaries. For example, if the string "aaa145-22-5-6-7-8" appears in a single line, it produces a match. This classifier can cause many false positives.
US SSN - Wide Minus Default	Permissive detection of all delimitation forms of valid social security numbers that have been issued by the US Social Security Administration, taking into account SSN randomization. Detects all SSNs that belong to "wide" sensitivity and not to "default."
US SSN (Default)	Detection of valid social security numbers that have been issued by the US Social Security Administration, taking into account SSN randomization, employing context sensitive lexical analysis, statistical analysis of patterns and custom dictionaries.
US SSN (Narrow)	Restricted detection of valid social security numbers, which have been issued by the US Social Security Administration, taking into account SSN randomization, tune in order to minimize false-positives. Requires additional evidences, such as SSN related terms in proximity.
US SSN (Wide)	Permissive detection of all delimitation forms of valid social security numbers that have been issued by the US Social Security Administration, taking into account SSN randomization.
US SSN: not-masked	Detection of valid social security numbers that have been issued by the US Social Security Administration, taking into account SSN randomization, context-sensitive lexical analysis, statistical analysis of patterns, and custom dictionaries. The returned values of this classifier are not masked.
US SSN in Form W-2	Detection of a US social security number in Form W-2.
User-defined file types extension	Detection of specific file types (user-defined) according to their extension.
VIN Code (Default)	Detection of Vehicle Identification Number (VIN) Code in proximity to a VIN-related term, such as 'Vehicle Identification Number' (default behavior)
VIN Code (Wide)	Detection of Vehicle Identification Number (VIN) Code - 'wide' behavior
Visual Basic (Default)	Detection of Visual Basic Source Code - "default" behavior.
Visual Basic (Narrow)	Detection of Visual Basic Source Code - "narrow" behavior.
Visual Basic (Wide)	Detection of Visual Basic Source Code - "wide" behavior.
W2 Form Support	Detection of IRS W2 forms
x86 Assembly Source Code	Detection of x86 Assembly Source Code.