Advanced patterns are used to define classifications. An advanced pattern definition can consist of a single expression or a combination of expressions and false positive definitions.
Note
Advanced patterns are defined using regular expressions (regex). A discussion of regex is beyond the scope of this document. There are a number of regex tutorials on the Internet where you can learn more about this subject.
In Trellix ePO - On-prem, select Menu → Data Protection → Classification.
Select the Definitions tab, then select Advanced pattern in the left pane.
The available patterns appear in the right pane.
Note
To view only the user-defined advanced patterns, deselect the Include Built-in items checkbox. User-defined patterns are the only patterns that can be edited.
Select Actions → New.
The New Advanced pattern definition page appears.
Enter a name and optional description.
Under Matched Expressions, do the following:
Enter an expression in the text box. Add an optional description.
Select a validator from the drop-down list.
Trellix recommends using a validator when possible to minimize false positives, but it is not required. If you don't want to specify a validator, or if validation is not appropriate for the expression, select No Validation.
Enter a number in the Score field.
This number indicates the weight of the expression in threshold matching. This field is required.
Click Add.
Under Ignored Expressions, do the following:
Enter an expression in the text box.
Note
If you have text patterns stored in an external document, you can copy-paste them into the definition with Import Entries.
In the Type field, select RegEx from the drop-down list if the string is a regular expression, or Keyword if it is text.
Click Add.
Click Save