Threat Level: green Handler on Duty: Brad Duncan

SANS ISC: Video: CVE-2021-40444 Maldocs: Extracting URLs SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Video: CVE-2021-40444 Maldocs: Extracting URLs

In this video, reacting to a reader's comment, I explain how you can add your own regex to my re-search.py tool (without changing the code).

I create a file with name re-search.txt and content:

str-bang="[^"]+![^"]+"

This will add regurlar expression "[^"]+![^"]+" named str-bang to re-search's library:

Didier Stevens
Senior handler
Microsoft MVP
blog.DidierStevens.com DidierStevensLabs.com

DidierStevens

597 Posts
ISC Handler
Oct 3rd 2021

Sign Up for Free or Log In to start participating in the conversation!