Regex Tester & Validator

Matches Mimecast email headers in multiline logs where the X-Mimecast-Spam-Score value is between 7 and 29 (single digits 7-9 or two-digit numbers 10-29) followed by an X-Mimecast-Spam-Signature: yes line on the next line. Useful in SIEM/email security log analysis to detect messages flagged as spam by Mimecast based on a score threshold, with the signature confirming the spam classification. Typically applied with global and multiline flags to scan across multiple email header blocks.