# Searching and filtering data

While this page discusses some EASM-specific search criteria, the NetSPI Platform's built-in filtering and search capabilities can also help you accomplish your tasks.

# Search syntax

All search fields in the NetSPI Platform support intelligent full text search.

Learning how to use this text search is key to maximizing the value of the collected data.

# Query building

You can query a large amount of data in every search field. For example, when searching Domain Assets you can search for not only the domain name, but for all IPs that domain resolves to, or all tags for that domain. To discover what fields you can search, view the EASM API documentation for the respective asset or exposures, as listed below, by visiting this link: NetSPI Platform API Documentation.

  • Domain
  • IP Address
  • Port
  • Vulnerability
  • Product
  • Certificate
  • Tag
  • DNS Record

To query nested data within a document, join the field names with a ., similar to JSON. For example, if you want to query all IP Addresses that have netspi.com resolve to them, search for domains.name:netspi.com in the search field on the IP Address page.

# Common searches

Searches must start with a root asset or exposure. For example, when searching IP Addresses, perform the search from the IP Address page, and not another page.

ip:"74.115.3.0/24"

tags.tag.name:production

service:https

ports.service:ssh OR ports.number:22

validTo:<now+1w