Search field

You can use search queries and search syntax to create advanced search filters to drill down into a data corpus and to retrieve specific pieces of information.

Quick search

1. In the side navigation bar click .

2. Click the search input field, and enter the search terms or queries.

3. Click or press ENTER.

Specific search

1. In the side navigation bar click .

2. In the new search view, enter the search terms or queries in the search box.

3. To run the search, click or press ENTER.

Any search queries you run through this search input field are executed Intelligence Center-wide.
You can search with literal search terms, wildcards, and Boolean operators.

Search access control

Search results for entities, observables, datasets, and the graph are filtered and made available based on the current user's set of rights and permissions.
This means that users who have different access rights, and who run identical search queries on the same Intelligence Center instance, can receive different search results.

If a user runs a search query that returns matches, and if the returned results include objects that the current user is not granted access to, they receive a notification message:

Search results include matches that the current user can access, based on:

• The selected Allowed sources in the group configuration of the group(s) the user belongs to.

• The TLP access level for the specified allowed sources in the group configuration of the group(s) the user belongs to.

• The permissions granted to the role assigned to the user.