A Regular Expression Search Primer for Forensic Analysts

Often forensic texts and articles assume a level of experience and comfort with Linux command line string searching and text manipulation that a reader does not possess. This assumption tends to leave the reader to their own devices to puzzle out how to locate and extract specific string content...

By

Tim Cook

April 24, 2012

All papers are copyrighted. No re-posting of papers is permitted

Related Content

Digital Forensics, Incident Response & Threat Hunting

January 27, 2025

A Visual Summary of SANS CTI Summit 2025

Check out these graphic recordings created in real-time throughout the event for SANS CTI Summit 2025

DFIR - Blog - SANS CTI Summit Preview_340 x 340a.jpg

Digital Forensics, Incident Response & Threat Hunting

January 27, 2025

SANS Threat Analysis Rundown in Review: SANS CTI Summit Preview

What to expect at the SANS CTI Summit 2025

DFIR - Blog - Beyond Meh-trics_340 x 340.jpg

Digital Forensics, Incident Response & Threat Hunting

January 9, 2025

Beyond Meh-trics: Examining How CTI Programs Demonstrate Value Using Metrics

Cyber threat intelligence (CTI) teams are frequently asked to provide metrics for leadership to validate their contributions