113 lines
2.7 KiB
INI
113 lines
2.7 KiB
INI
config dlp data-type
|
|
edit "g-credit-card"
|
|
set pattern "\\b([2-6]{1}\\d{3})[- ]?(\\d{4})[- ]?(\\d{2})[- ]?(\\d{2})[- ]?(\\d{2,4})\\b"
|
|
set verify "builtin)credit-card"
|
|
set look-back 20
|
|
set transform "\\b\\1[- ]?\\2[- ]?\\3[- ]?\\4[- ]?\\5\\b"
|
|
next
|
|
edit "g-edm-keyword"
|
|
set pattern ".+"
|
|
set transform "/\\b\\0\\b/i"
|
|
next
|
|
edit "g-hex"
|
|
set pattern "built-in"
|
|
next
|
|
edit "g-keyword"
|
|
set pattern "built-in"
|
|
next
|
|
edit "g-mip-label"
|
|
set pattern "^[[:xdigit:]]{8}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{4}-[[:xdigit:]]{12}$"
|
|
set transform "built-in"
|
|
next
|
|
edit "g-regex"
|
|
set pattern "built-in"
|
|
next
|
|
edit "g-ssn-us"
|
|
set pattern "\\b(\\d{3})-(\\d{2})-(\\d{4})\\b"
|
|
set verify "(?<!-)\\b(?!666|000|9\\d{2})\\d{3}-(?!00)\\d{2}-(?!0{4})\\d{4}\\b(?!-)"
|
|
set look-back 12
|
|
set transform "\\b\\1-\\2-\\3\\b"
|
|
next
|
|
end
|
|
config dlp filepattern
|
|
edit 1
|
|
set name "builtin-patterns"
|
|
config entries
|
|
edit "*.bat"
|
|
next
|
|
edit "*.com"
|
|
next
|
|
edit "*.dll"
|
|
next
|
|
edit "*.doc"
|
|
next
|
|
edit "*.exe"
|
|
next
|
|
edit "*.gz"
|
|
next
|
|
edit "*.hta"
|
|
next
|
|
edit "*.ppt"
|
|
next
|
|
edit "*.rar"
|
|
next
|
|
edit "*.scr"
|
|
next
|
|
edit "*.tar"
|
|
next
|
|
edit "*.tgz"
|
|
next
|
|
edit "*.vb?"
|
|
next
|
|
edit "*.wps"
|
|
next
|
|
edit "*.xl?"
|
|
next
|
|
edit "*.zip"
|
|
next
|
|
edit "*.pif"
|
|
next
|
|
edit "*.cpl"
|
|
next
|
|
end
|
|
next
|
|
edit 2
|
|
set name "all_executables"
|
|
config entries
|
|
edit "bat"
|
|
set filter-type type
|
|
set file-type bat
|
|
next
|
|
edit "exe"
|
|
set filter-type type
|
|
set file-type exe
|
|
next
|
|
edit "elf"
|
|
set filter-type type
|
|
set file-type elf
|
|
next
|
|
edit "hta"
|
|
set filter-type type
|
|
set file-type hta
|
|
next
|
|
end
|
|
next
|
|
end
|
|
config dlp sensitivity
|
|
edit "Private"
|
|
next
|
|
edit "Critical"
|
|
next
|
|
edit "Warning"
|
|
next
|
|
end
|
|
config dlp profile
|
|
edit "g-default"
|
|
set comment "Default profile."
|
|
next
|
|
edit "g-sniffer-profile"
|
|
set comment "Log a summary of email and web traffic."
|
|
set summary-proto smtp pop3 imap http-get http-post
|
|
next
|
|
end
|