Session-Based Tagging
You can now tag search conditions that pertain
to session information. You can find session information when you
view the network sessions relatedto asample or session details in your
search results.
- Start an AutoFocus™ search for session information.
- The list ofSession Identifiersincludes types of artifacts that pertain exclusively to session-related information:
- The following types of artifacts pertain to information that you can find in both sample and session search results:Domain,Email Address,Filename,Hash,IP Address,URL, andUser Agent.
- Click the tag icon to create a tag based on your search conditions.
- Verify that you created the tag successfully.
- ClickTagson the navigation pane.
- Type the name of the tag you just created in the quick search field to quickly locate the tag.
- Click on the tag to view the search conditions in the tag details. New tags are private by default.
