Using Data Rulesets to Find Sensitive Data

Rulesets are groups of regular expressions (regexs) that define a search pattern. Using regexs, we look for patterns of alpha-numeric strings with common keywords to identify data and, specifically, Personally Identifiable Information (PII) when running a scan.

In Risk Intelligence we provide a number of default, predefined rulesets which you can view and modify in Step 3 - Data Rulesets, in the Create Custom Scan Configuration wizard, when creating or editing a Data Breach Risk or Data Discovery scan configuration. The rulesets listed are applied when using this scan configuration.

In this step you can perform the following tasks:

• Customize Rule - Customize a ruleset.
• Reset Rulesets to Default - This option resets the rulesets to the defaults and removes any customizations made.
• Create New Custom Ruleset
• Edit Custom Ruleset
• Remove Ruleset - This option removes the ruleset from the table.

Customize Rule

1. Click on Customize alongside the ruleset you want to edit.
2. The Editing Rule: <rule name> page is displayed.



3. Edit details as required and click Done when finished.

Reset Rulesets to Default

1. At the top pf the table, click on Reset all Rules to Default.
2. Click OK to confirm.

The rulesets are reset to the defaults and any customizations are removed.

Create New Custom Ruleset

1. At the bottom of the table, click on Add Ruleset.
2. Tick in the checkbox(es) alongside the predefined rule(s) you want to add and click on Add Selected Rules.

Build your own Ruleset

If you want to build your own set of regex rules, click on Add Custom Rule and add the rule details in the Editing Rule panel.

Edit Custom Ruleset

1. Alongside the customized ruleset, click on Edit. The Editing Rule page is displayed.
2. Make your changes as required and click Done to save.

Remove Ruleset

Click on the Remove button alongside the ruleset.

If this was a predefined ruleset, you can add it again using the Add Ruleset button or click Undo Changes.