The CB Response console provides a check box interface to choose criteria for searches of processes, binaries, alerts, and threat reports. However this chapter describes how to construct more complex queries.
The guide provides more details on terms, operators and fields that can be used to construct queries which can be run across process search, binary search, alerts and threat reports.