Tools/Custom SIT Builder

Custom SIT Builder

Build a custom SIT and test it against sample text instantly, evaluated the same way Purview does it.

Custom SIT Builder · live test

Pattern matchedmedium · 75

The regex \bEMP-\d{6}\b hit with no supporting evidence nearby. Confidence is whatever you assign, so a bare format match can only earn the level you give it.

Myth-buster demos

Start from a template:

Start from a recipe

Proven custom SITs for detection needs the built-ins miss. Load one, watch it match, then adapt it to your data.

SIT definition

Name

Recommended confidence(cosmetic)

Description

Pattern 1

matched x2

Primary element (the trigger)

Case insensitive

\bword edge (start or end of a word)

[A-Z]{2}exactly 2 capital letters

\d{6}exactly 6 digits

\bword edge (start or end of a word)

Would match: RN684287 · RA805020 · AV834005

Supporting elements (corroborating evidence)

None. The primary element alone decides the match.

Not any of these (suppresses the match if found nearby)

Character proximity

characters either side of the primary matchAnywhere in the document

Additional checks

Ignores matches where all digits are identical

Pattern 2

matched x2

Primary element (the trigger)

Case insensitive

\bword edge (start or end of a word)

[A-Z]{2}exactly 2 capital letters

\d{6}exactly 6 digits

\bword edge (start or end of a word)

Would match: RN684287 · RA805020 · AV834005

Supporting elements (corroborating evidence)

Not any of these (suppresses the match if found nearby)

Character proximity

characters either side of the primary matchAnywhere in the document

Additional checks

Ignores matches where all digits are identical

Pattern 3

matched x1wins

Primary element (the trigger)

Case insensitive

\bword edge (start or end of a word)

[A-Z]{2}exactly 2 capital letters

\d{6}exactly 6 digits

\bword edge (start or end of a word)

Would match: RN684287 · RA805020 · AV834005

Supporting elements (corroborating evidence)

Not any of these (suppresses the match if found nearby)

Character proximity

characters either side of the primary matchAnywhere in the document

Additional checks

Ignores matches where all digits are identical

Test against sample text

Or drop a document here (.docx, .xlsx, .pptx, .pdf, .txt). It never leaves your browser.

MatchHigh (85) confidenceInstance count: 1

This is the single result Purview returns: the highest confidence of any matched pattern. No averaging, no rollup.

This is what confidence is actually for: routing. Three example rules, checked top down. The first rule whose conditions this text meets is the one that acts.

Blockxfires (1 instance)

Notify userxmet, outranked

Audit onlyxmet, outranked

Pattern results

Matches for pattern 3

complete incomplete supporting

New starter paperwork: the employee id EM483920 has been issued for payroll setup. Their badge code XX111111 is a placeholder. Separately, flight BA204519 departs Tuesday.

Your browser's regex engine differs from Purview's in rare edge cases. Validate with the portal's built-in test before deploying. Your test data never leaves your browser.