# Keyword / Query Monitoring

<mark style="color:green;">Keyword / Query Monitoring</mark> strengthens DRP coverage by tracking brand names, VIPs, and **sensitive strings** across monitored sources and languages. It focuses on meaningful mentions and security-relevant patterns—credentials, URLs, and other indicators, turning scattered references into structured findings with context and initial severity.&#x20;

#### What We Monitor

The watchlists include organization names, executive identities, product terms, domains, and **sensitive strings** tied to confidentiality or access. Detection considers both direct and indirect mentions and correlates them to monitored entities to surface true relevance.  \
Signals are captured in **multiple languages**, ensuring that references in different regions or communities are not missed.&#x20;

#### How Queries Are Applied

Queries operate across text and shared media so that <mark style="color:green;">**evidence inside files**</mark> is discoverable. Text found in images (OCR), documents, and archives is extracted and evaluated against the same watchlists used for messages.  Security-oriented patterns such as <mark style="color:green;">**malicious URLs**</mark>, commands, and phishing artefacts are included to detect early threat coordination alongside brand or VIP references. &#x20;

#### Why This Matters

Mentions of brands, executives, and **sensitive strings** often precede data leakage, credential exposure, or social-engineering campaigns. By unifying multilingual queries with entity correlation and media-aware discovery, the monitoring reduces noise and delivers <mark style="color:green;">**actionable findings**</mark> what was found, where, and why it matters for security.