Presence of Personally Identifying Information (PII)

This alert is triggered when the Redact Processor has the option Mask PII Presence set to On and a social security number, email address, or custom-defined pattern of PII is detected in the telemetry data.

General Configuration

Field	Value
Name	PII Data Present
Description	Triggers when the metadata field pii_presence contains a yes value for any of the pre-set or custom PII types.

Evaluation and Condition Configuration

Field	Value
Operation
Window Type
Window Duration (minutes)
Group by Field Paths
Operation
Window Type
Window Duration
Conditional Statement
Event Timestamp