Structured queries in VQL
Standard search starts from an indicator. Advanced Search starts from a description of the infrastructure you are looking for, and asks every data source at once for the hosts that match it.
Each result is a domain or an address you can open into its full record. Save the query and it becomes a standing view of the same pattern as collection continues.
- Combine conditions across data sources in a single query
- Every match opens into its full history
- Save a query and return to it as new infrastructure appears
Hosts that share nothing else still match on how they respond.