Regular Expressions (RegEx)

2 Days

Course description

Information are sometimes located in very large files (big data). Retrieving a specific data in such context cannot be done efficiently via a line-by-line examination. A regular expression describes the format of the data to be retrieved. By using a regular expression, one can retrieve the specific data and all other having the same format. This training is unique, covering in depth a subject barely covered, if covered, during university, college, and digital investigation courses.

AUDIENCE

  • Computer forensics specialist
  • eDiscovery specialist in an organization
  • Programmer or database manager
  • Social Science searcher
  • People working with large files, such as server logs

PREREQUISITES

  • None

OBJECTIVES

  • Be able to determine the structure of specific data
  • Be able to constitute a realistic specimen containing the type of specific data
  • Be able to write a regular expression and validate it using the specimen

GENERAL INFORMATION

  • Software used during this course are Windows freeware that do not require installation
  • Participant must be able to use the Windows software, either on his own computer or on a virtual machine
  • Each theoretical notion is followed by a practical exercise and the pace is comfortable, even for beginners

DETAILED OUTLINE

DAY 1 : FOUNDATIONS

  • Introduction: Regular expression versions, how to use The Regulator
  • Metacharacters and anchors
  • Range and quantifiers
  • Special and category characters

DAY 2 : COMPLEX REGULAR EXPRESSIONS

  • Greedy and ungreedy expressions
  • Backward references and conditional masks
  • Lookups
  • Digital Investigation Software
  • Conclusion
  • Final exam

OUR NEXT TRAININGS

Training schedule to be confirmed upon registration