Advanced Investigate query language

I need a solution

The docs seem a little sparce, is there anything outlining advanced Investigate query language search terms/operators?

Example:

  • Looking for Office 365 SharePoint Online site content report
    • ‘Site’ LIKE  ‘https://domain.sharepoint.com/sites/somesite/’
  • User Risk Type report accross multiple services.
    • RT PCI AND (‘User’ ‘id@domain.com’) OR (‘Mail Owner/Sender’ ‘first.last@domain.com’)
0

Related:


Leave a Reply