The order for file filtering is as follows:
File is found –
- Is it one of the sources you identified?
- Is it allowed under the exclusion patterns (if any)?
- Does it meet the inclusion patterns (if any)?
- Does it meet the date range criteria (if any)?
- Does it match the header (type) and extension criteria (if any)?
- Does it meet the hash filtering criteria (if any)?
- Does it meet the encryption criteria (if any)?
- Does it meet the keyword criteria (if any)?