How to Capture Emails Sent with <secure> in the subject line using Data Identifier Pattern Language

Products

• Data Loss Prevention

Issue/Introduction

Users that need emails to be encrypted at the MTA must add <secure> to the subject line.

Auditing of this activity is required for accountability.

Cause

Specifically defining the < or > characters in a Data Identifier pattern does not yield an incident. A metacharacter is needed to represent these two characters in order to detect successfully.

Resolution

The \L matches non-letter ASCII characters. This metacharacter matches < and > as expected.

Example:

Additional Information

Data identifier pattern language specification