Forum Discussion
Dark_Knight666
Silver I
2 months agoCyber Kill Chain: Delivery
Hello, I was wondering if anybody else is experiencing the same issue as me as I feel what I am entering is correct but not getting any search results? This is for Q4. I also find it quite problemat...
- 2 months ago
Your query is very nearly there but, after you've initially filtered out the POST requests, try applying a search for "*.exe" as a secondary filter i.e.
index="botsv1" etc...
| search="*.exe"
netcat
Silver III
2 months agoFrom my point of view: Just don't mix ", “ and ”. I didn't try to enter your query with the double quotes you used, but using only ". That works.