Rules that include a regular expression that is matched multiple times within the target variable (not multiple capture groups) with an action to capture and sanitiseMatchedBytes will only sanitize the first match. Subsequent matches within the target variable remain un-sanitized. It would be useful if all matches could be sanitized.