[sleuthkit-users] Regular Expressions
Brought to you by:
carrier
From: Brian C. <ca...@sl...> - 2016-11-14 18:09:58
|
Autopsy currently has a limitation when searching for regular expressions, that spaces are not supported. It’s not a problem for Email addresses and URLs, but becomes an issue phone numbers, account numbers, etc. This limitation comes from using an indexed search engine (since spaces are used to break text into tokens). We’re looking at ways of solving that and need some guidance. If you write your own regular expressions, can you please let me know and share what they look like. We want to know how complex the expressions are that people use in real life. Thanks! |