Global search page

The global search page is a tool to search for values from multiple sources within the specified license and time range. For example, you can search for an IP address and receive matching file and mail downloads.

There are different search types depending on the query parameters you use:

IP

Search across the User Portal for a given IP address. This will search both source and destination IP addresses.

MD5/Analyst UUID

Specify the MD5 hash of an analyzed file and retrieve related reports.

Hostname

Search across the User Portal for a given hostname. This will search both source and destinations.

Analysis tags

Analysis tags are labels assigned to a file or URL by the Analyst analysis engine. They can identify a threat or threat class, or refer to specific malicious behavior that was detected.

The search page will attempt to determine the type of search depending on the text you enter. You can also select a query type from the pull-down menu.

Click the Search button to run the query. The results of your query will be displayed below.