1id: file-extract 2 3info: 4 name: File with Extractor 5 author: pdteam 6 severity: info 7 tags: file 8 9file: 10 - extensions: 11 - all 12 13 extractors: 14 - type: regex 15 regex: 16 - "(?m)11\\s(EE|FF)\\s11" 17