Indicator search

The Indicator Search allows you to search for threat information based on domain or threat label. These searches allow you to discover whether a domain is a threat or whether a specific type of threat is active in your network.

In addition to performing a search from the Indicator Search page, you can also complete a search from the Dashboard. The Dashboard redirects you to the Indicator Search page with search results.

You are also redirected to the Indicator Search page when you choose to view More Details in an event report. When viewing threat or access control events, you can also select the information icon associated with a domain to view Indicators of Compromise (IOC) details in a separate window. The IOC details that appear provide the same information that is on the Indicator Search page.