Environment
- EDR (formerly CB Response): All Supported Versions
Question
Is it possible to query an event but it's full URL?
Answer
- It's possible to create a query based on Domain: but not the entire URL
- Domain:thisdomain.com will work but Domain:thisdomain.com/News will not
Related Content