Supported ROT Signals

  • Updated

Records365 contains predefined recognizers for ROT. This page describes the different ROT entities Records365 can detect, and the method used to detect those.

The Records365 Intelligence Signaling add-on module is available for early access on request. The Intelligence Signaling add-on module requires an additional subscription. Please get in touch with Support to be part of the early access program.

Supported Connectors

ROT signals are currently supported on:

  • SharePoint Online 
  • OneDrive for Business 
  • FileConnect Enterprise
  • Dropbox
  • Box

Supported Signals

 Field name

Description

Detail of ROT signal

Comment

IsEmptyFile

File size equal to exactly 0B

filesize = 0

Empty files likely created due to corruption, incomplete file download

IsSmallFile

File size between 1B and 10B

Filesize between 1b and 10b

Small files likely created due to corruption

IsArchiveFile

Archive or compressed file types

".a", ".ar", ".cpio", ".shar", ".LBR", ".iso", ".lbr", ".mar", ".sbx", ".tar", ".bz2", ".F", ".?XF", ".gz", ".lz", ".lz4", ".lzma", ".lzo", ".rz", ".sfark", ".sz", ".?Q?", "?Z?", ".xz", ".z", ".Z", ".zst", ".??_", ".7z", ".s7z", ".ace", ".afa", ".alz", ".apk", ".arc", ".ark", ".cdx", ".arj", ".b1", ".b6z", ".ba", ".bh", ".cab", ".car", ".cfs", ".cpt", ".dar", ".dd", ".dgc", ".dmg", ".ear", ".gca", ".genozip", ".ha", ".hki", ".ice", ".jar", ".kgb", ".lzh", ".lha", ".lzx", ".pak", ".partimg", ".paq6", ".pea", ".pim", ".pit", ".qda", ".rar", ".rk", ".sda", ".sea", ".sen", ".sfx", ".sit", ".sitx", ".sqx", ".tar.gz", ".tgz", ".tar.Z", ".tar.bz2", ".tbz2", ".tar.lz", ".tlz", ".tar.xz", ".txz", ".tar.zst", ".uc", ".uc0", ".uc2", ".ucn", ".ur2", ".ue2", ".uca", ".uha", ".war", ".wim", ".xar", ".xp3", ".yz1", ".zip", ".zipx", ".zoo", ".zpaq", ".zz", ".ecc", ".ecsbx", ".par", ".par2", ".rev"

Likely no value as records

 

IsSystemFile

System File extensions

".ade", ".adp", ".asa", ".ashx", ".asmx", ".asp", ".bas", ".bat", ".cdx", ".cer", ".chm", ".class", ".cmd", ".com", ".config", ".cnt", ".cpl", ".crt", ".csh", ".der", ".dll", ".exe", ".fxp", ".gadget", ".grp", ".hlp", ".hpj", ".hta", ".htr", ".htw", ".ida", ".idc", ".idq", ".ins", ".isp", ".its", ".jse", ".json", ".ksh", ".lnk", ".mad", ".maf", ".mag", ".mam", ".maq", ".mar", ".mas", ".mat", ".mau", ".mav", ".maw", ".mcf", ".mda", ".mdb", ".mde", ".mdt", ".mdw", ".mdz", ".ms-one-stub", ".msc", ".msh", ".msh1", ".msh1xml", ".msh2", ".msh2xml", ".mshxml", ".msi", ".msp", ".mst", ".ops", ".pcd", ".pif", ".pl", ".prf", ".prg", ".printer", ".ps1", ".ps1xml", ".ps2", ".ps2xml", ".psc1", ".psc2", ".pst", ".reg", ".rem", ".scf", ".scr", ".sct", ".shb", ".shs", ".shtm", ".shtml", ".soap", ".stm", ".svc", ".url", ".vb", ".vbe", ".vbs", ".vsix", ".ws", ".wsc", ".wsf", ".wsh", ".xamlx"

Likely no value as records

 

IsTempFile

Temporary files created by applications

".tmp"

May no longer hold value

 

IsTemplateFile

Templates for common Microsoft applications

".dot", ".dotx", ".dotm", ".xlt", ".xltx", ".xltm", ".pot", ".potx", ".potm"

Templates for Office applications

 

IsModified>7years

Items not modified date for 7 years or more

sourcelastmodifieddate greater than 7 years

Items older than 7 years - consider whether they are still of value as records

Uses core property field SourceLastModifiedDate

IsDefaultFileName

Unmodified file names

"document.docx", "book.xlsx", "presentation.ptx"

Files created and default file name not modified

Was this article helpful?

0 out of 0 found this helpful

Have more questions? Submit a request