Veritas Enterprise Vault™ Classification
- About this guide
- Getting started
- Setting up the classification properties
- Configuring your classification rules
- Defining and applying classification policies
- Running classification in test mode
- Publishing classification properties and rules across your site
- Appendix A. Enterprise Vault properties for use in classification rules
- Appendix B. PowerShell cmdlets for use with classification
- Appendix C. Troubleshooting and performance monitoring
About the example classification rules
Note:
The example rules are for test purposes only and may not deliver the required results in a production environment.
The example rules are in a single XML file, Example Rules.xml
, which is in the Classification
subfolder of the Enterprise Vault program folder; for example, C:\Program Files (x86)\Enterprise Vault\Classification\Example Rules.xml
.
The example rules have the following features in common:
They have a scope of "Enterprise Vault": they classify items in the Enterprise Vault classification cache folder only.
They use the Veritas Information Classifier method to search for strings and regular expression patterns in items.
When the rules find a match, they assign an appropriate value to one of the four Enterprise Vault classification properties on the matching item: evtag.category, evtag.exclusion, evtag.inclusion, or evaction.discard.
For example, some of the rules search for strings in the form of credit card numbers. If the rules find an item that contains such a string, they assign the value "PII" to the item's evtag.category property, to indicate that the item contains personally identifiable information.
Table: Example classification rules describes the classification rules in the example rule set.
Table: Example classification rules
Rule name | Description | Property used | Assigned value |
---|---|---|---|
Detects items that may contain American Express credit card numbers. | evtag.category | PII | |
Detects items from the email domains of known news and research providers (alerts.yahoo.com, cnn.com, news.google.com, and so on). | evtag.exclusion | Auto-generated | |
Detects out-of-office messages. | evaction.discard | Default Retention Category | |
Detects items containing terms and phrases that are commonly associated with charitable solicitations. | evtag.exclusion | Charity solicitations | |
Detects items that were tagged in Microsoft Outlook as being Company Confidential. | evtag.inclusion | Company Confidential | |
Detects items that may contain Brazilian CPF numbers and associated words or phrases. | evtag.category | PII | |
Detects items that had an Enterprise Vault retention category named "1 Month" when they were submitted for classification. | evtag.category | Short retention | |
Detects items that were sent within a specified date range. | evtag.inclusion | Sensitive project | |
Detects items that may contain Discover Card credit card numbers. | evtag.category | PII | |
Detects items that may contain UK driving license numbers. | evtag.category | PII | |
Detects items that have an attachment of type PST or NSF. | evtag.category | Email containers | |
Detects fax attachments. | evtag.category | Fax | |
Detects items containing terms and phrases that are commonly associated with financial transactions. | evtag.inclusion | Financial | |
Detects items that may contain current identity card numbers (issued in Germany since 2010). | evtag.category | PII | |
Detects items that are 1000 KB or larger. | evtag.category | Large item | |
Detects items that have 10 or more attachments. | evtag.category | Many attachments | |
Detects items containing terms and phrases that are commonly associated with legal documents. | evtag.inclusion | Legal | |
Detects items that were tagged in Microsoft Outlook as being of low importance. | evtag.exclusion | Low importance | |
Detects items that may contain MasterCard credit card numbers. | evtag.category | PII | |
Detects items that were sent to an external recipient. | evtag.inclusion | Sent externally | |
Detects items that were sent externally to a specific domain. | evtag.inclusion | Sent externally | |
Detects items that may contain UK national insurance numbers. | evtag.category | PII | |
Detects items that may contain Singaporean national registry identification numbers. | evtag.category | PII | |
Detects items for which Enterprise Vault was only able to supply partial content for classification (because, for example, their content was encrypted). | evtag.category | Partial content | |
Detects items that may contain Indian permanent account numbers and associated words or phrases. | evtag.category | PII | |
Detects items that were tagged in Microsoft Outlook as being Personal. | evtag.category | Personal | |
Detects items that have attachments in Microsoft Word or Excel format. | evtag.category | Productivity documents | |
Detects items that contain the user-defined code name of a project that is considered sensitive. | evtag.inclusion | Sensitive project | |
Detects items that may contain US social security numbers. | evtag.category | PII | |
Detects items that may contain French VAT/TVA numbers. | evtag.category | PII | |
Detects items that may contain Visa credit card numbers. | evtag.category | PII | |
Detects items that include web links. | evtag.category | Web links |