McAfee Data Loss Prevention 9.2.2 Product Guide

2Using McAfee DLP MonitorFinding incidents using keywords and conceptsSpecial character exceptionsCertain special characters are not supported in queries. Words that include non‐alphabetic characters,such as numbers or spaces, are supported only if they are identified in an Exact Search.Table 2-20 Characters that cannot be used in queriesCharacter. periodDescription; semicolon| pipe`back tick less than/greater than( ) parentheses\ \\ backslashes/> ]]> markup* control characters/ escape charactersWord stemmingThe capture engine supports word stemming to return words related to a query, but imposesrestrictions to retrieve the most significant results.Do not use tildes (~) or asterisks (*) to retrieve words related to a word stem.If a plural or gerund of a complete word used in a search is found, the result is reported as if it were aword stem. For example, searching for basket to retrieve basketball will not work, but it will returnbaskets. Similarly, searching for run will return result running.Word stemming takes precedence in exact searches. For example, when you enter a query like Keywords| Exact Match | information, the keyword will be stemmed to "inform", which will return all strings thatcontain that stem word. To prevent word stemming in such a case, include additional words in yourquery.You can use word stemming with logical parameters and additional parameters to focus a query. Forexample, use Keyword | expression with the following expression to find documents containing the wordConfidential that are also marked EITHER Eyes Only or Do Not Distribute OR contain variations of thewords secret or secure.Confidential + (("Eyes Only" || "Do Not Distribute") || (secret))The word stem in this example returns related words, such as secrets or secretive. Incomplete orpartial words are not recognized.Finding incidents using keywords and conceptsFind data using or excluding keywords and concepts, exact keyword matches, concept expressions,and non‐English keywords.ContentsUsing keywords to find incidentsFind incidents using keywordsFind incidents by excluding keywords40 McAfee Data Loss Prevention 9.2.2 Product Guide