EDR: Is It Possible to Query the URL of a Netconn?

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Is it possible to query an event but it's full URL?

Environment

• EDR (formerly CB Response): All Supported Versions

Resolution

• It's possible to create a query based on Domain: but not the entire URL
• Domain:thisdomain.com will work but Domain:thisdomain.com/News will not