*.bat*
*.bmp*
*.cab*
*.class*
*.csproj*
*.config*
*.csv*
*.cer*
*.db*
*.der*
*.doc*
*.docx*
*.dll*
*.exe*
*.gif*
*.gz*
*.html*
*.kdb*
*.kdbx*
*.ico*
*.ini*
*.jar*
*.jpg*
*.jpeg*
*.jp2*
*.msi*
*.msu*
*.mp3*
*.odp*
*.ods*
*.odt*
*.otf*
*.ott*
*.p7b*
*.p7c*
*.pdf*
*.pfx*
*.png*
*.pol*
*.pptx*
*.ppt*
*.py*
*.ps1*
*.psm1*
*.rar*
*.rdp*
*.reg*
*.rtf*
*.tar*
*.tif*
*.txt*
*.vbs*
*.xls*
*.xlsx*
*.xml*
*.vbs*
*.vbsx*
*.webp*
*.zip*
*.7z*
\baccesskey\b
\bauth\b
\bcredential\b
\bcred\b
\bidentifiant\b
\bmdp\b
\bmdpass\b
\bmotdepasse\b
\bprivate-key\b
\bpwd\b
\bsecret\b
\bssh-key\b
\btoken\b
\blogin\b
\bapikey\b
password
net use .+ /user:.*
net user( /add)? \S+ \S+( /add)?
securestring
\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b
\b[a-fA-F0-9]{32}\b
\b[a-fA-F0-9]{40}\b
\b[a-fA-F0-9]{64}\b