IMAGING
Logicube Forensic Falcon™ User’s Manual
52
Multiple keywords can be used. If all filenames
with “pic” or “txt” is desired, the custom filter
would be:
.*(pic|txt)
This will find all files with “pic” or “txt” in the
name.
Example 3: File extension keywords
For file extensions,
\.
has to be placed at the
end of the syntax:
.*\.(pic)
This will find all files with “pic” in the extension
such as:
filename.pic
filename.pict
Example 4: File extensions without a wildcard at the
end
If a search is desired for a specific filename
without any wildcard afterwards, a
$
has to be
added to the syntax. Using the example above
(in example 3), you can use the following
syntax:
.*\.(pic)$
This will find all files with the “pic” extension
and nothing afterwards. Using the examples
above, it will find “filename.pic” but not
“filename.pict”.
Signature Based File Categories –
Allows the user to set
signature based file categories. This is the second level
of filtering and will narrow down the results of the first
filter to only the selected file categories, if selected.
