Data Loss Prevention Endpoint default dictionaries, text patterns, and advanced patterns
Last Modified: 2023-05-24 06:07:59 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Data Loss Prevention Endpoint default dictionaries, text patterns, and advanced patterns
Technical Articles ID:
KB85747
Last Modified: 2023-05-24 06:07:59 Etc/GMT Environment
Data Loss Prevention (DLP) Endpoint - all supported versions For supported environments, see KB68147 - Supported platforms for Data Loss Prevention Endpoint. SummaryThe default dictionaries and text patterns don't contain all related keywords or text and advanced patterns to match different scenarios.
DLP Endpoint text patterns, advanced patterns, and dictionaries are examples of how you can use the product. But, they're not intended for use in their default state. Requirements are different for each environment. So, you must understand and edit the text patterns, advanced patterns, and dictionaries before you implement them. You can only address the vulnerabilities and needs of the environment. These needs are based on the examination of the threats, data, patterns, and security policies set by the Security Administrators. This method is the best way to address the needs and vulnerabilities of the environment.
Although some default text patterns, advanced patterns, and dictionaries are encompassing by default, we don't know the individual requirements for every possible environment. So, we defer the configuration of DLP Endpoint to the Security Administrators who must define and tune the rules to address their specific requirements. If you require assistance, Professional Services can help you evaluate the environment and help with the creation and tuning of rules, text patterns, advanced patterns, dictionaries, and other configurations for DLP Endpoint.
IMPORTANT: The import of Regex patterns from other applications or resources isn't supported. Regex patterns from other applications or resources might not work because of incompatibility with the DLP Endpoint Regex engine. Use of such patterns can result in unexpected behavior with the DLP Endpoint Agent. SolutionUse the product ideas forum to request the addition of more:
To submit a new product idea, go to the Enterprise Customer Product Ideas page.
Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website. For more information about product ideas, see KB60021 - How to submit a Product Idea. Affected ProductsLanguages:This article is available in the following languages: |
|