Regexing an email from S1

[hayden_redd]

I have an email from S1 with this body

A threat was detected on machine: BLAHBLAH123 with IP…

and I want to grab the machine name. Where my regex guru’s at?

[brandon_mcclure]

^[A-Z0-9]+

[tyler_schmidtke]

@hayden_redd

A threat was detected on machine: BLAHBLAH123 with IP

This is probably another fine case for my anything but a space regex.

A threat was detected on machine: {{host:/([^\s]+)/}}

[hayden_redd]

@hayden_redd

A threat was detected on machine: BLAHBLAH123

this is my input
A threat was detected on machine: BLAHBLAH123

[hayden_redd]

this is my input

A threat was detected on machine: BLAHBLAH123

[brandon_mcclure]

(?:\S)[A-Z][A-Z0-9]+

[nate.whistler_nate.whistler (Nate Whistler)]

I would look at installing GitHub - pemistahl/grex: A command-line tool and library for generating regular expressions from user-provided test cases. It takes all the hard work out of regex.