topic Case insensitive Regex expression in Custom Signatures

Case insensitive Regex expression

ttanzi — Tue, 15 Mar 2016 18:30:46 GMT

I am creating a regex to capture on the expression "Bank of America". I am having trouble getting case insensitivity to work so that I can capture on "Bank of America, bank of america or any other variation. What is the format of this expression to account for case insensitivity?

thanks all

Re: Case insensitive Regex expression

rcole — Tue, 15 Mar 2016 18:38:58 GMT

Hello, ttanzi!

According to page 38 of the creating custom signature document, case sensitivity will depend on the context you are pattern matching within, with some innately being case sensitive, and others not. requiring you define potential patterns of varying case manually.

Reference: https://live.paloaltonetworks.com/t5/Documentation-Articles/Creating-Custom-Threat-Signatures/ta-p/58569?attachment-id=1097

Re: Case insensitive Regex expression

bpappas — Mon, 11 Apr 2016 17:45:56 GMT

Ignoring case sensistivity in pattern matching is not currently in PAN-OS (as of April 2016).

-Benjamin