Prior Publisher

The Association of Digital Forensics, Security and Law (ADFSL)


Regular expressions enable digital forensic analysts to find information in files. The best way for an analyst to become proficient in writing regular expressions is to practice. This paper presents the code for an app that allows an analyst to practice writing regular expressions.


Kleene, S. C. (1956). Representation of Events in Nerve Nets and Finite Automata. In Automata Studies (pp. 3-41), C. Shannon, J. McCarthy, and W. Ashby (Eds.). Princeton, NJ: Princeton University Press.

Microsoft (n.d.). How to: Verify that Strings Are in Valid Email Format. Microsoft.com. Retrieved 1/25/2013 from http://msdn.microsoft.com/enus/library/01escwtf.aspx

Stewart, J., & Uckelman, J. (2011). Searching Massive Data Streams Using Multipattern Regular Expressions. In G. Peterson & S. Shenoi (Eds), Advances in Digital Forensics VII (pp. 49-63).

Vasiliadis, G., Polychronakis, M., Antonatos, S., Markatos, E., & Ioannidis, S. (2009). Regular expression matching on graphics hardware for intrusion detection. In E. Kirda, S. Jha, D. Balzarotti (Eds.) Recent Advances in Intrusion Detection (pp. 265-283). Springer Berlin/Heidelberg.

Thompson, K. (1968). Regular Expression Search Algorithm. Communications of the ACM, 419-422.



To view the content in your browser, please download Adobe Reader or, alternately,
you may Download the file to your hard drive.

NOTE: The latest versions of Adobe Reader do not support viewing PDF files within Firefox on Mac OS and if you are using a modern (Intel) Mac, there is no official plugin for viewing PDF files within the browser window.