Expression syntax guidelines

Expressions are the key components of Endpoint Data Discovery (EDD) rules and are used during an EDD scan to detect specific file content.

An expression may be a single word, such as "confidential", or it may include a combination of words, variables, special characters, and operators, such as:

(Confidential W/1 (Data OR Image OR Document))

This expression will detect any of the following phrases included in a file:

  • confidential data
  • Confidential image
  • confidential Document

To get started creating your own custom EDD rules, you first need to know how to use special characters and operators in your expressions, and understand the general guidelines and limitations that apply.

For more help creating expressions using the syntax supported in Endpoint Data Discovery Rules, contact Absolute Technical Support.