Use Simple Search

This tool is perfect for quick, straightforward queries.

• Start with a datasource (Web Scan, Dark Web Scan, etc.)—check the Web Search guide for options.

• Zero in on key data like domain or IP address from the dropdown.

• Use equals or contains to nail your search—simple yet effective!

• Enter a specific value (e.g., threatactor.com) to get targeted results fast.

• Hit Search to see filtered threat intel in a flash.

Step-by-Step cheat sheet

1. Choose datasource: Select from options like Web Scan, Dark Web Scan, etc.

2. Select field: A drop-down to choose from (e.g., IP Address).

3. Pick operator: Choose ‘equals’ or ‘contains’.

4. Add value: Type your target (e.g., 192.168.1.1).

5. Execute: Click Search to get results.

Example

Find domains tied to a threat actor:

• Field: domain

• Operator: contains

• Value: threatactor.com

Web Search

1. From the left navigation menu, select Web Data > Web Search.

2. Select Datasource, Field Name, Operator, and Value.

3. Add more expressions with Add New.

4. Click Search.

For help creating more complex queries, go to our Use Advanced Search article.