Cortex XDR XQL case_sensitive config causes the query to either be case sensitive or case insensitive.
config case_sensitive = true | false
case_sensitiveconfiguration identifies whether field values are evaluated as case sensitive or case insensitive. If you do not provide this stage on your query, the default behavior is
true; case is considered when evaluating field values.
setting can overwrite this
Case Sensitivity (case_sensitive)
case_sensitiveconfiguration for all fields in the application except for BIOCs, which will remain case insensitive no matter what this setting is set to.
config case_sensitive = false | dataset = xdr_data | fields actor_process_image_name as apin | filter apin != NULL and apin contains "python" | limit 100
Recommended For You
Recommended videos not found.