Historical Threat Hunting

Navigate to Threat Investigation, click the drop-down and select the Historical Threat Hunting. The Threat Investigation page allows you to search, create or Run/Edit a query.

To create a query

1. Navigate to Threat Investigation > Historical Threat Hunting . On the Threat Investigation page, click the Save button to Create the Query.
2. Type the Query Title and Description.
3. Click Confirm.

To run or edit a query

1. Click the Query and select Run to run the query.
2. Click the Query and select Load to load the query.
3. Click the Query and select Edit to edit the query.

4. Click the Query and select Delete to delete the query.

   

5. Click Confirm.

Click Download Result to download the query result.