Forum Discussion
Dark_Knight666
Silver I
2 months agoCyber Kill Chain: Delivery
Hello, I was wondering if anybody else is experiencing the same issue as me as I feel what I am entering is correct but not getting any search results? This is for Q4. I also find it quite problemat...
- 2 months ago
Your query is very nearly there but, after you've initially filtered out the POST requests, try applying a search for "*.exe" as a secondary filter i.e.
index="botsv1" etc...
| search="*.exe"
barney
Bronze III
2 months agoMy bad, sorry - search doesn't require the = symbol