TruSTAR's Advanced Search allows users to utilize operators like AND, OR, NOT and precedence as part of their match criteria. This capability is accessible through the existing Search bar in Station. You can learn more about our basic search capability here.
Supported Query Strings
With advanced search you can find Reports that contain the specific keywords you're investigating. After logging into TruSTAR you will see the search bar at the top of the application. You can use Filter feature to apply enclave, date, tags and IOC type filters.
Click in the search box, type in /tsquery followed by the search query string for the desired search terms, and press enter. Results are separated by IOCs and Reports and you can see how many hits you got for each.
I want to search for reports that have a specific word only in the title of the report
I want to search for reports using the AND operator
/tsquery keyword1 + keyword2
I want to search for reports using the OR operator
/tsquery keyword1 | keyword2
I want to search for reports that exclude the specified keyword
/tsquery keyword1 +- keyword2
I want to search for reports using multiple operands and apply a precedence logic to the results
/tsquery keyword1 + ( keyword2 | keyword 3)