Format for regular expressions used in detection and response rules can be accessed here. Syntax it supports can be accessed here. Simple Playground to test regular expressions offline can be found here.