DLP queries in Ediscovery-SharePoint Online
SSN/ Credit Card/ Drivers License
SensitiveType:"Credit Card Number" OR SensitiveType:"U.S. Social Security Number (SSN)" OR SensitiveType:"U.S. Driver's License Number"
Criteria you need to fulfill for the sensitive type documents to be shown in ediscovery queries.
SSN:
<Entity id="a44669fe-0d48-453d-a9b1-2cc83f2cba77" patternsProximity="300" recommendedConfidence="75">
<Pattern confidenceLevel="85">
<IdMatch idRef="Func_ssn" />
<Any minMatches="1">
<Match idRef="Keyword_ssn" />
<Match idRef="Func_us_date" />
<Match idRef="Func_us_address" />
</Any>
</Pattern>
<Pattern confidenceLevel="75">
<IdMatch idRef="Func_unformatted_ssn" />
<Match idRef="Keyword_ssn" />
<Any minMatches="1">
<Match idRef="Func_us_date" />
<Match idRef="Func_us_address" />
</Any>
</Pattern>
</Entity>
Eg1: Formatted SSN
685-20-1398
and then enter either one of the following below in document
a. Keyword SSN
b. Valid date in format month/year eg: 09/15
c. Valid US address: it should have street, apt no, city, State and zip code
For this one the query would look something like:
SensitiveType="U.S. Social Security Number (SSN) | * | 85.."
Eg2: Unformatted SSN
561 20 1309 or 561201309
Put Keyword SSN
and then enter either one of the following below in document
a. Valid date in format month/year eg: 09/15
b. Valid US address: it should have street, apt no, city, State and zip code.
Credit Card:
<Entity id="50842eb7-edc8-4019-85dd-5a5c1f2bb085"
patternsProximity="300" recommendedConfidence="85">
<Pattern confidenceLevel="85">
<IdMatch idRef="Func_credit_card" />
<Any minMatches="1">
<Match idRef="Keyword_cc_verification" />
<Match idRef="Keyword_cc_name" />
<Match idRef="Func_expiration_date" />
</Any>
</Pattern>
</Entity>
Eg:1
Note: If you put a fake 16 digit number of credit card the this is not a valid test. We have an algorithm for verifying whether a number is a valid credit card number. This is why you cannot test with random or fake 16 digit numbers—you must use a properly formatted credit card number.
**** **** **** ****
CC verification number: 273
Expiration date: 04/30/16
Drivers License:
</Pattern>
<Pattern confidenceLevel="75">
<IdMatch idRef="Func_washington_drivers_license_number" />
<Match idRef="Keyword_washington_drivers_license_name" />
<Match idRef="Keyword_us_drivers_license" />
</Pattern>
<Pattern confidenceLevel="65">
<IdMatch idRef="Func_washington_drivers_license_number" />
<Match idRef="Keyword_washington_drivers_license_name" />
<Match idRef="Keyword_us_drivers_license_abbreviations" />
<Any minMatches="0" maxMatches="0">
<Match idRef="Keyword_us_drivers_license" />
</Any>
</Pattern>
Eg:1 (* indicates the actual Driver License number)
************
Washington Drivers license number (Replace with your state name)
Eg:2
************
State: WA (Replace with your state name or initials)
Comments
- Anonymous
July 21, 2015
It is in point of fact a great and helpful piece of info. I am happy that you shared this useful info with us. Please stay us up to date like this. Thanks for sharing.
http://staygreenacademy.com/