When one file runs through detection the resulting incident says "100% matched". For another file detected we see "matched exactly". What is the difference between these two occurrences?
Indexed Document Matching.
IDM implements three forms of matching: exact, 100%, and derivative.
Matching |
Description |
---|---|
Exact match |
An exact match occurs when the MD5 digest, file length, and file format type of a detected file match that of an indexed file. |
100% match |
A 100% match occurs when a detected file matches the complete fingerprint (hashes) of an indexed file; that is, all of the content matches exactly and is the same file format |
Derivative match |
A derivative match occurs when a detected percentage of content matches at least that amount in an indexed file; that is, only the content matches the %, the file format is not checked. |