How can I use a prefix to exclude a match?

book

Article ID: 160164

calendar_today

Updated On:

Products

Data Loss Prevention Enforce

Issue/Introduction

I have an Exact Data Match (EDM) profile that has as one column an account number.  I am finding false positive matches in messages where there is a dollar amount that has the number string of a valid account number.

For example, the column has an account number of:

12345

And the email message says:

The cost of goods will be $12345.

I want to setup a condition that will "see" the dollar sign at the beginning of the match and exclude that match. 

Can I do it?

Resolution

The string in a message:

The cost of goods will be $12345.

will be stripped to individual tokens:

The
cost
of
goods
will
be
12345

Our Detection Engine is seeing the tokens after they have been stripped, so we would only be matching against 12345, not $12345.  Therefore, it is not possible to create an exception for a dollar amount.