Search for Investigate

tc.findings.cloudAccounttc.findings.cloudAccount

Provide a string value to find findings associated with a specific cloud account ID.

Examples

Find findings for AWS account 123456789012

tc.findings.cloudAccount: 123456789012

tc.findings.affectedResourcetc.findings.affectedResource

Provide a string value to find findings related to a specific affected resource ID.

Examples

Find findings affecting an S3 bucket

tc.findings.affectedResource: my-bucket-name

tc.findings.remoteResourcetc.findings.remoteResource

Provide a string value to find findings involving a specific remote resource.

Examples

Find findings involving a specific IP address

tc.findings.remoteResource: 192.168.1.100

tc.findings.alertClasstc.findings.alertClass

Select the type of alert (API Activity, Detection Activity, Network Activity).

Examples

Find all API Activity alerts

tc.findings.alertClass: API Activity

tc.findings.categorytc.findings.category

Provide a string value to filter findings by their security category. Examples

Find findings in the Data Protection category

tc.findings.category: Data Protection

tc.findings.severitytc.findings.severity

Select a severity level (2, 3, 4, or 5) to find findings with the specified severity.

Examples

Find high-severity findings

tc.findings.severity: 4

tc.findings.cloudProvidertc.findings.cloudProvider

Select the cloud provider (AWS, AZURE, or GCP) to find findings specific to that provider.

Examples

Find findings from AWS resources

tc.findings.cloudProvider: AWS

tc.findings.regiontc.findings.region

Provide a string value to find findings from a specific cloud region. Examples

Find findings from US East 1 region

tc.findings.region: us-east-1

tc.findings.resourceTypetc.findings.resourceType

Provide a string value to find findings related to a specific type of cloud resource.

Examples

Find findings related to virtual machines

tc.findings.resourceType: vm

tc.findings.hashtc.findings.hash

Provide a string value to find findings by their unique hash identifier.

Examples

Find a specific finding using its hash

tc.findings.hash: a1b2c3d4e5f6

tc.findings.remote.citytc.findings.remote.city

Provide a string value to find findings associated with a specific city.

Examples

Find findings from remote sources in London

tc.findings.remote.city: London

tc.findings.remote.countrytc.findings.remote.country

Provide a string value to find findings associated with a specific country.

Examples

Find findings from remote sources in Canada

tc.findings.remote.country: Canada