Find Tags by Match Criteria

  1. Select
    Tags
    on the navigation pane to view the complete list of AutoFocus tags.
  2. Click the filter icon and add a tag filter.
    add-tag-filter.png
  3. Select the artifact type
    Match Criteria
    and set up a search condition:
    match-criteria-tags.png
    AutoFocus looks for samples with tag definitions that match the search condition:
    match-criteria-tag-definition.png
  4. View the
    Tag Detail
    of the resulting tags to verify that AutoFocus applied the filter.
    For example, when you filter for any tag that
    contains
    the
    Match Criteria
    sample.exe, the results include the Unit 42 tag Blackpos because its definition has instances of sample.exe.
    match-criteria-tag-detail.png
  5. Next step:
    Learn about other ways to find and filter AutoFocus tags, including finding tags with the most hits, the top tags detected during a selected date range, and the top tags matching to search.

Recommended For You