In any cyber security investigation, a bulk of the work involves wading through volumes of logs looking for that needle in the haystack. Using sophisticated SIEMS or scripting or even Notepad++, these logs can be quickly mined for insight using Perl Compatible Regular Expressions. Shucking the typical trope of "minimize false positives," this presentation teaches a methodology to efficiently develop easy to understand, good enough regular expressions that are tailor written for the investigation and the data set. Worry less, just get the data. RegEx makes it possible to filter your logs with searches like: SQL_Injection=*