External DocumentationTo learn more, visit the CrowdStrike documentation.
Basic Parameters
Parameter | Description |
---|---|
File Types | A comma-separated list of file types to restrict search results by. For example: * EMAIL * PCAP * PDF * PE32 |
Limit | The maximum number of matching files to return in the response. |
YARA Rule | The YARA rule pattern to search for matching files. This value must follow YARA syntax with rule definition, conditions, and strings. |
Advanced Parameters
Parameter | Description |
---|---|
Max Date | Only include files first observed before this date. |
Max Size | Only include files smaller than this size. Accepts values in bytes or with units. For example: * 128000 * 1.3KB * 8MB * 2GB |
Metadata Fields | Select which metadata fields to include in results. For example: * sha256 * md5 * type * size * first_seen * label * family Multiple fields can be comma-separated. |
Min Date | Only include files first observed after this date. |
Min Size | Only include files larger than this size. Accepts values in bytes or with units. For example: * 128000 * 1.3KB * 8MB * 2GB |