field:value syntax
Search a specific field, e.g. email:[email protected].
SEARCH One search across every module
Global Discovery
News, rules, IoCs, dark web posts, actors, CVEs, cases and reports: search them all with one query and narrow the results by module.
Screenshots are taken from a demo tenant; organisation names and data are entirely fictional.
An analyst often holds just one piece: an IP, a username, a hash. Global Discovery searches that piece across seventeen sources: the intelligence wire, hunting rules, IoC domains, URLs and hashes, dark web posts and groups, threat actors, APT groups, the briefing room, vulnerabilities, cases, ransomware telemetry, compromised assets, leaks and the underground economy.
What it does
Module filters
Results narrow by module chips; advanced search accepts extra conditions.
From result to case
A found record opens in its module screen in one click.
What you get
- An indicator's link to your organisation surfaces in seconds.
- No more searching module by module.
- The first step of every investigation becomes standard.
Other modules
Next step
What shows up on your own surface?
In a 30-minute session we run a live scan against your own domains.