Environment
- CB Response Console: All Versions
- CB Response Cloud: Current Version
Question
Is it possible to perform case sensitive searches within CB Response GUI for specific syntax arguments ?
Answer
Currently it is not possible to perform case sensitive searches around syntax arguments.
Additional Notes
The following examples below would return the same results, however each argument performs a different action based on case sensitivity.
process_name:ssh AND (cmdline:"ssh -l *")
process_name:ssh AND (cmdline:"ssh -L *")
Related Content