Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

EDR: Is It Possible to Query the URL of a Netconn?

EDR: Is It Possible to Query the URL of a Netconn?

Environment

  • EDR (formerly CB Response): All Supported Versions

Question

Is it possible to query an event but it's full URL?

Answer

  • It's possible to create a query based on Domain: but not the entire URL
  • Domain:thisdomain.com will work but Domain:thisdomain.com/News will not

Related Content


Labels (1)
Tags (2)
Was this article helpful? Yes No
0% helpful (0/1)
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
1550
Contributors