[sleuthkit-users] Best way to multi-keyword search with Autopsy Regex?

[Matthew M. S. <mm...@ta...>]

To all-


I'm looking for the best way to regex search with Autopsy for two 
disjoint words.

In other words, I am looking for the appearance of two names in a given 
sector, i.e. Bob and Mike

What would be the best way to do this?

I've tried

[Bob|bob](.*)[Mike|mike]

granted, if the names come in reverse I'm not going to get anything, so 
perhaps..

[[Mike|mike](.*)[Bob|bob]|[Bob|bob](.*)[Mike|mike]]


Or am I completely going the wrong direction here?


Thanks!

M