Regular Expressions 101

<AUDT:INFO>the literal text <AUDT:INFO> (case sensitive)

.*any character (except for line terminators), repeated any number of times

Passwordstate:the literal text Passwordstate: (case sensitive)

Global pattern flags

g modifier: global. Finds all matches instead of stopping after the first

m modifier: multiline. Causes ^ and $ to match the start and end of each line, not only the start and end of the string

Detailed match information will be displayed here automatically.

Search reference

Regular Expression

<AUDT:INFO>.* Passwordstate:

New

08 21 2020 08:03:24 10.62.1.17 <AUDT:INFO> 2020-08-21 08:02:25 10.62.1.17   Passwordstate: A scheduled Account Heartbeat check successfully validated the password for the Active Directory account fakedomain\FakeUser (\Private Credentials\dv\Domain). Client IP Address = 10.62.1.17. PasswordListID = 32, PasswordID = 39

Regular Expression

Extraction