Advanced Patterns doesn't work in certain context

[4hm3dh4ny]

The problem is related to the "Advanced Patterns" (i.e. Regular expressions).

First of all to "over-simplify" what I want to achieve.. I want to match the word "cat" but not the word "caterpillar".. so the intuitive thing is to use "Look-around assertions":

cat(?!erpillar)

the above expression should match "cat" but not "caterpillar"..

the problem is McAfee uses Google RE2 not PCRE.. and look-around assertions are not supported in Google RE2.

So the next intuitive thing is to mix the usage of "Matched Expressions" & "Ignored Expressions":

Matched Expressions:

cat

Ignored Expressions:

caterpillar

Now the problem is that the two are matching! (i.e. the DLP endpoint detects both "cat" & "caterpillar").. why is that?

[jsubbura]

Hi @4hm3dh4ny ,

Thank you for writing in here.

Instead of regex you can use Dictionary Definitions to achieve your requirement. you can mention start with and end with so that DLP ignores Caterpillar and detects only if Cat is present in the document.

Thank you.