specific “problem” patterns (text strings) defined to it by the analyst via
programming or configuration, which the tool then highlights or flags.
This enables the reviewer to narrow the focus of his/her manual code
inspection to those areas of the code in which the patterns highlighted