Start a simple search for an artifact from
any page in AutoFocus™, or use the AutoFocus search editor to perform
complex searches, with conditions that allow you to narrow or broaden
the scope of your search.
Toggle your view of search results
The samples matched to your search conditions
The sessions during which the samples were detected (Activity
The threat indicators found in the returned samples and the
DNS history and PAN-DB categorization of the results (Indicators
After performing a search, you can drill down
in sample results to find artifacts seen with that sample. For each
artifact associated with a sample, AutoFocus lists the number of
times the artifact has been detected with benign (
), grayware (
), and malware (
) samples. Artifacts
that are seen disproportionately with malware are indicated to be Suspicious or Highly
Suspicious. AutoFocus also makes it easy to view indicators
that are found with your search results.
Start searching through
samples and sessions for matches to an artifact from any page on
the AutoFocus portal.