I made a change to a data pattern in a policy but previous assets that should match aren’t resulting in a new incident. Why?
Modifying a policy’s data pattern requires that you re-scan for existing assets in the SaaS applications involved. The good news is that the metadata from earlier assets has already been collected. A re-scan will match the already collected metadata to the new pattern. New assets found during a forward scan will be evaluated using the updated data pattern.