#
Searching and filtering data
While this page discusses some EASM-specific search criteria, the NetSPI Platform's built-in filtering and search capabilities can also help you accomplish your tasks.
#
Search syntax
All search fields in the NetSPI Platform support intelligent full text search.
Learning how to use this text search is key to maximizing the value of the collected data.
#
Query building
You can query a large amount of data in every search field. For example, when searching Domain Assets you can search for not only the domain name, but for all IPs that domain resolves to, or all tags for that domain. To discover what fields you can search, view the EASM API documentation for the respective asset or exposures, as listed below, by visiting this link: NetSPI Platform API Documentation.
- Domain
- IP Address
- Port
- Vulnerability
- Product
- Certificate
- Tag
- DNS Record
To query nested data within a document, join the field names with a .
, similar to JSON. For example, if you want to
query all IP Addresses that have netspi.com
resolve to them, search for domains.name:netspi.com
in the search field on the
IP Address page.
#
Common searches
Searches must start with a root asset or exposure. For example, when searching IP Addresses, perform the search from the IP Address page, and not another page.
ip:"74.115.3.0/24"
tags.tag.name:production
service:https
ports.service:ssh OR ports.number:22
validTo:<now+1w