Positive sampleEntity sampleText snippet

Incident log with device IDs

Name: Incident log with device IDs
Creator: DLP Samples
License: https://creativecommons.org/licenses/by/4.0/

This text snippet contains IP Address, MAC Address, IMEI Hardware ID, Latitude/Longitude, HTTP Cookie. It is a positive sample: a DLP tool with good recall should detect it.

2026-09-14T03:12:44Z login from 203.0.113.42 (MAC 00:1A:2B:3C:4D:5E)
Device IMEI 490154203237518 last seen at 37.7749, -122.4194
Cookie: sessionid=8f14e45fceea167a5a36dedd4bea2543; csrftoken=Zx9Q2

Should be detected

IP Address
Detects an internet protocol (IP) network address.
MAC Address
Detects a MAC address, a 12-digit hexadecimal value used to identify a network adapter.
IMEI Hardware ID
Detects an International Mobile Equipment Identity (IMEI) ID, a unique identification number programmed into GSM and UMTS mobile devices.
Latitude/Longitude
Detects geographic coordinates expressed as a latitude and longitude pair.
HTTP Cookie
Detects HTTP cookies.

How to test with it

Copy or download the sample.
Move it through the channel you want to test: paste it into a GenAI app or an AI agent's prompt, upload it to a SaaS app or cloud drive, attach it to an email, or copy it to removable media.
Check your DLP: it should detect IP Address, MAC Address, IMEI Hardware ID, Latitude/Longitude, HTTP Cookie.
Record the result to calculate precision and recall.

Incident log with device IDs

More Global IDs samples