Available Detectors
Insystech Data Loss Prevention (DLP) uses detectors to define what it scans for. A detector is a type of sensitive data, such as a name, email address, etc...
Insystech DLP uses detectors in the configuration for its scans to determine what to inspect for and how to transform findings. detector names are also used when displaying or reporting redaction results.
Important: Detectors are not a 100% accurate detection method and can't alone guarantee compliance with regulatory requirements. Insystech recommends that you factor this into your business process and perform any additional redaction if necessary.
Global
InfoType | Description |
| Identifiers used by developers to track users for advertising purposes. These include Google Play Advertising IDs, Amazon Advertising IDs, Apple's identifierForAdvertising (IDFA), and Apple's identifierForVendor (IDFV). |
| An age measured in months or years. |
| A credit card number is 12 to 19 digits long. They are used for payment transactions globally. |
| A credit card track number is a variable length alphanumeric string. It is used to store key cardholder information. |
| A date. This infoType includes most date formats, including the names of common world holidays. Note: Not recommended for use during latency sensitive operations. |
| A date of birth. Note: Not recommended for use during latency sensitive operations. |
| A domain name as defined by the DNS standard. |
| An email address identifies the mailbox that emails are sent to or from. The maximum length of the domain name is 255 characters, and the maximum length of the local-part is 64 characters. |
| A person’s ethnic group. |
| A common female name. Note: Not recommended for use during latency sensitive operations. |
| A first name is defined as the first part of a |
| A person’s gender identity. |
| Alphanumeric and special character strings that may be personally identifying but do not belong to a well-defined category, such as user IDs or medical record numbers. |
| An International Bank Account Number (IBAN) is an internationally agreed-upon method for identifying bank accounts defined by the International Standard of Organization (ISO) 13616:2007 standard. The European Committee for Banking Standards (ECBS) created ISO 13616:2007. An IBAN consists of up to 34 alphanumeric characters, including elements such as a country code or account number. |
| An HTTP cookie is a standard way of storing data on a per website basis. This detector will find headers containing these cookies. |
| The International Classification of Diseases, Ninth Revision, Clinical Modification (ICD-9-CM) lexicon is used to assign diagnostic and procedure codes associated with inpatient, outpatient, and physician office use in the United States. The US National Center for Health Statistics (NCHS) created the ICD-9-CM lexicon. It is based on the ICD-9 lexicon, but provides for more morbidity detail. The ICD-9-CM lexicon is updated annually on October 1. |
| Like ICD-9-CM codes, the International Classification of Diseases, Tenth Revision, Clinical Modification (ICD-10-CM) lexicon is a series of diagnostic codes. The World Health Organization (WHO) publishes the ICD-10-CM lexicon to describe causes of morbidity and mortality. |
| An International Mobile Equipment Identity (IMEI) hardware identifier, used to identify mobile phones. |
| An Internet Protocol (IP) address (either IPv4 or IPv6). |
| A last name is defined as the last part of a |
| A physical address or location. Note: Not recommended for use during latency sensitive operations. |
| A media access control address (MAC address), which is an identifier for a network adapter. |
| A local media access control address (MAC address), which is an identifier for a network adapter. |
| A common male name.Note: Not recommended for use during latency sensitive operations. |
| Terms that commonly refer to a person's medical condition or health. Note: Not recommended for use during latency sensitive operations. |
| A name of a chain store, business or organization.Note: Not recommended for use during latency sensitive operations. |
| A passport number that matches passport numbers for the following countries: Australia, Canada, China, France, Germany, Japan, Korea, Mexico, The Netherlands, Poland, Singapore, Spain, Sweden, Taiwan, United Kingdom, and the United States. |
| A full person name, which can include first names, middle names or initials, and last names. Note: Not recommended for use during latency sensitive operations. |
| A telephone number. |
| A street address. Note: Not recommended for use during latency sensitive operations. |
| A SWIFT code is the same as a Bank Identifier Code (BIC). It's a unique identification code for a particular bank. These codes are used when transferring money between banks, particularly for international wire transfers. Banks also use the codes for exchanging other messages. |
| A timestamp of a specific time of day. |
| A Uniform Resource Locator (URL). |
Credentials and secrets
The infoType detectors in this section detect credentials and other secret data.
InfoType | Description |
| An authentication token is a machine-readable way of determining whether a particular request has been authorized for a user. This detector currently identifies tokens that comply with OAuth or Bearer authentication. |
| Microsoft Azure certificate credentials for application authentication. |
| A basic authentication header is an HTTP header used to identify a user to a server. It is part of the HTTP specification in RFC 1945, section 11. |
| An encryption key within configuration, code, or log text. |
| Google Cloud API key. An encrypted string that is used when calling Google Cloud APIs that don't need to access private user data. |
| Google Cloud service account credentials. Credentials that can be used to authenticate with Google API client libraries and service accounts. |
| An HTTP cookie is a standard way of storing data on a per website basis. This detector will find headers containing these cookies. |
| Clear text passwords in configs, code, and other text. |
| A weakly hashed password is a method of storing a password that is easy to reverse engineer. The presence of such hashes often indicate that a system's security can be improved. |
| An XSRF token is an HTTP header that is commonly used to prevent cross-site scripting attacks. Cross-site scripting is a type of security vulnerability that can be exploited by malicious sites. |
Canada
InfoType | Description |
| A Canadian bank account number. |
| The British Columbia Personal Health Number (PHN) is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of British Columbia. |
| A driver's license number for each of the ten provinces in Canada. |
| The Ontario Health Insurance Plan (OHIP) number is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of Ontario. |
| A Canadian passport number. |
| The Québec Health Insurance Number (HIN) is issued to citizens, permanent residents, temporary workers, students, and other individuals who are entitled to health care coverage in the Province of Québec. |
| The Canadian Social Insurance Number (SIN) is the main identifier used in Canada for citizens, permanent residents, and people on work or study visas. With a Canadian SIN and mailing address, one can apply for health care coverage, driver's licenses, and other important services. |
United Kingdom
InfoType | Description |
| An Irish (IE) passport number. |
| The Irish Personal Public Service Number (PPS number, or PPSN) is a unique number for accessing social welfare benefits, public services, and information in Ireland. |
| The Scotland Community Health Index Number (CHI number) is a 10-digit sequence used to uniquely identify a patient within National Health Service Scotland (NHS Scotland). |
| A driver's license number for the United Kingdom of Great Britain and Northern Ireland (UK). |
| A National Health Service (NHS) number is the unique number allocated to a registered user of the three public health services in England, Wales, and the Isle of Man. |
| The National Insurance number (NINO) is a number used in the United Kingdom (UK) in the administration of the National Insurance or social security system. It identifies people, and is also used for some purposes in the UK tax system. The number is sometimes referred to as NI No or NINO. |
| A United Kingdom (UK) passport number. |
| A United Kingdom (UK) Unique Taxpayer Reference (UTR) number. This number, comprised of a string of 10 decimal digits, is an identifier used by the UK government to manage the taxation system. Unlike other identifiers, such as the passport number or social insurance number, the UTR is not listed on official identity cards. |
United States
InfoType | Description |
| An American Bankers' Committee on Uniform Security Identification Procedures (CUSIP) number is a 9-character alphanumeric code that identifies a North American financial security. |
| The US National Drug Code (NDC) is a unique identifier for drug products, mandated in the United States by the Food and Drug Administration (FDA). |
| A United States Adoption Taxpayer Identification Number (ATIN) is a type of United States Tax Identification Number (TIN). An ATIN is issued by the Internal Revenue Service (IRS) to individuals who are in the process of legally adopting a US citizen or resident child. |
| The American Bankers Association (ABA) Routing Number (also called the transit number) is a nine-digit code. It's used to identify the financial institution that's responsible to credit or entitled to receive credit for a check or electronic transaction. |
| A US Drug Enforcement Administration (DEA) number is assigned to a health care provider by the US DEA. It allows the health care provider to write prescriptions for controlled substances. The DEA number is often used as a general "prescriber number" that is a unique identifier for anyone who can prescribe medication. |
| A driver's license number for the United States. Format can vary depending on the issuing state. |
| A United States Employer Identification Number (EIN) is also known as a Federal Tax Identification Number, and is used to identify a business entity. |
| The US National Provider Identifier (NPI) is a unique 10-digit identification number issued to health care providers in the United States by the Centers for Medicare and Medicaid Services (CMS). The NPI has replaced the unique provider identification number (UPIN) as the required identifier for Medicare services. It's also used by other payers, including commercial healthcare insurers. |
| A United States Individual Taxpayer Identification Number (ITIN) is a type of Tax Identification Number (TIN), issued by the Internal Revenue Service (IRS). An ITIN is a tax processing number only available for certain nonresident and resident aliens, their spouses, and dependents who cannot get a Social Security Number (SSN). |
| A United States passport number. |
| A United States Preparer Taxpayer Identification Number (PTIN) is an identification number that all paid tax return preparers must use on US federal tax returns or claims for refund submitted to the US Internal Revenue Service (IRS). |
| A United States Social Security number (SSN) is a 9-digit number issued to US citizens, permanent residents, and temporary residents. The Social Security number has effectively become the United States national identification number. |
| A United States state name. |
| A US toll-free telephone number. |
| A vehicle identification number (VIN) is a unique 17-digit code assigned to every on-road motor vehicle. |
Additional detectors continue to be added all the time.
Last updated