The primary regex is astonishingly broad: four letters followed by more letters and digits matches thousands of ordinary strings. The SWIFT keyword in proximity is doing ALL of the detection work. Without it, this SIT would match half of every codebase.
The patterns, as the engine reads them
confidence 75 (medium)
- Primary: Regex_swift: Four letters, then 5 to 31 letters or digits (optional spaces)
- Required: Keyword_swift: 34 keywords (word match), e.g. "international organization for standardization 9362", "iso 9362", "iso9362"
Catalogue data reflects Microsoft's built-in SITs, which are the same in every tenant. This is a faithful simulation, not the live service, so confirm with the portal's SIT test before acting on a result.