Browse Rules

beta.DLP: Austria VAT

Detects messages containing Austrian VAT numbers.

beta.DLP: Belgium VAT

Detects messages containing Belgian VAT numbers.

beta.DLP: France VAT

Detects messages containing French VAT numbers.

beta.DLP: Germany VAT

Detects messages containing German VAT numbers.

beta.DLP: Hungary VAT

Detects messages containing Hungarian VAT numbers.

beta.DLP: Netherlands VAT

Detects messages containing Netherlands VAT numbers.

Theom - Financial data unencrypted

"Creates Sentinel incidents for critical/high Theom risks, associated with ruleId TRIS0003 (Financial data has been observed in unencrypted data stores. Encrypt data at rest to comply with this CIS requirement)"

beta.DLP: SWIFT/BIC Code

Detects outbound messages containing SWIFT/BIC codes. SWIFT codes are used to identify banks and financial institutions globally and may indicate financial account details being shared externally.

beta.DLP: Canada Bank Account

Detects messages containing Canadian bank account numbers.

beta.DLP: France Bank Account

Detects messages containing French bank account numbers.

beta.DLP: Poland REGON

Detects messages containing Polish REGON business registration numbers.

beta.DLP: Singapore UEN

Detects messages containing Singapore Unique Entity Numbers (UEN).

beta.DLP: Spain Bank Account

Detects messages containing Spanish bank account numbers.

beta.DLP: Australia ABN

Detects messages containing Australian Business Numbers (ABN).

beta.DLP: Australia Bank Account

Detects messages containing Australian bank account numbers.

beta.DLP: Luxembourg Non-Natural ID

Detects messages containing Luxembourg non-natural person identification numbers.

beta.DLP: New Zealand Bank Account

Detects messages containing New Zealand bank account numbers.

beta.DLP: Crypto Wallet Address

Detects messages containing cryptocurrency wallet addresses.

beta.DLP: IBAN Code

Detects messages containing IBAN codes.

Theom - Financial data exposed

"Creates Sentinel incidents for critical/high Theom risks, associated with ruleId TRIS0026 (Theom has observed financial data in a data store that is publicly exposed. As per this requirement, use this information to apply data access control lists or access permissions to secure your data)"

beta.DLP: US ABA Routing Number

Detects messages containing US ABA routing numbers.

beta.DLP: US Bank Account Number

Detects messages containing US bank account numbers.

Unauthenticated API Endpoint with Sensitive Data

Detects internet-facing API endpoints with no authentication that handle sensitive data classifications (PII, Financial, PHI, Confidential). Uses StratoSecure_ApiInventory_CL from Phase 6 API inventory discovery.

Pathlock TDnR - Bank Master Data Changes

Detects changes to bank master data in SAP, forwarded by Pathlock Threat Detection and Response. Unauthorized modifications to bank data may indicate financial fraud, payment redirection, or business email compromise attacks targeting payment processes.

Pathlock TDnR - Credit Card Data Changes

Detects changes to credit card records in SAP, forwarded by Pathlock Threat Detection and Response. Unauthorized modifications to credit card data may indicate financial fraud, PCI-DSS violations, or targeted attacks against payment data stored within SAP.