Azure IAAS database connection string and Azure SQL connection string
Format
The string Server
, server
, or data source
followed by the characters and strings outlined in the pattern below, including the string cloudapp.azure.com
or cloudapp.azure.net
or database.windows.net
, and the string Password
or password
or pwd
.
Pattern
- the string
Server
,server
, ordata source
- zero to two whitespace characters
- an equal sign (=)
- zero to two whitespace characters
- any combination of between 1-200 lower- or uppercase letters, digits, symbols, special characters, or spaces
- The string "cloudapp.azure.com", "cloudapp.azure.net", or "database.windows.net"
- any combination of between 1-300 lower- or uppercase letters, digits, symbols, special characters, or spaces
- the string
Password
,password
, orpwd
- zero to two whitespace characters
- an equal sign (=)
- zero to two whitespace characters
- one or more characters that aren't a semicolon (;), quotation mark ("), or apostrophe (')
- a semicolon (;), quotation mark ("), or apostrophe (')
Checksum
No
Keyword Highlighting
Supported
When keyword highlighting is supported in the contextual summary for a sensitive information type or a trainable classifier, in the Contextual Summary view of activity explorer, the keywords in a document that were matched to a policy are highlighted.
Definition
A DLP policy has high confidence that it's detected this type of sensitive information if, within a proximity of 300 characters:
- The regular expression
CEP_Regex_AzureConnectionString
finds content that matches the pattern. - The regular expression
CEP_CommonExampleKeywords
doesn't find content that matches the pattern.
<!--Azure IAAS Database Connection String and Azure SQL Connection String-->
<Entity id="ce1a126d-186f-4700-8c0c-486157b953fd" patternsProximity="300" recommendedConfidence="85">
<Pattern confidenceLevel="85">
<IdMatch idRef="CEP_Regex_AzureConnectionString" />
<Any minMatches="0" maxMatches="0">
<Match idRef="CEP_CommonExampleKeywords" />
</Any>
</Pattern>
</Entity>
Keywords
CEP_common_example_keywords
This sensitive information type identifies these keywords by using a regular expression, not a keyword list.
- contoso
- fabrikam
- northwind
- sandbox
- onebox
- localhost
- 127.0.0.1
- testacs.com
- s-int.net