Click Find Candidates to auto-detect emails, URLs, hashes, IPs, etc., or type a term under Add term and press Enter for each one. Everything lands in the list above, where you pick what actually gets cloaked before applying it.