Discovery Policies for Identifiers
5 min
discovery policies give you precise control over subdomain enumeration they define rules that determine which identifiers are automatically created or recommended and which patterns are ignored, letting you focus enumeration on the subdomains that matter to you and reduce noise in your events feed creating a discovery policy navigate to the identifiers page and select the policies tab locate identifiers discovery policies and select create identifier discovery policy in the discovery policy terms field, enter the patterns you want to ignore to avoid the discovery of irrelevant subdomain identifiers you can enter multiple patterns separated by commas click create policy to save it each policy appears in the identifiers discovery policies list, showing its identifier types and terms to edit a policy, select it from the list and edit its configuration to remove a policy, select the delete icon on its card disabling all subdomain enumeration to stop subdomain enumeration entirely across all of your domain identifiers navigate to the identifiers page and select the policies tab locate identifiers discovery policies and select create identifier discovery policy in the discovery policy terms field, enter select create policy no new subdomains are enumerated while this policy is active subdomains that were already discovered are not removed to stop monitoring them, delete those identifiers individually ignoring specific patterns when creating a discovery policy, you can define ignore patterns to exclude specific subdomains from enumeration the following patterns are supported ignores all enumerated subdomains domain com ignores all enumerated subdomains under a specific domain, for example test domain com and dev domain com api ignores the api subdomain across all domains, for example api domain1 com and api domain2 com these rules help fine tune subdomain enumeration by excluding unnecessary or irrelevant identifiers creating a new policy does not affect previously discovered subdomains