[FR] Ability to specify non-relative timeframe - Githubissues

redcanaryco / surveyor

A cross-platform baselining, threat hunting, and attack surface analysis tool for security teams.

MIT License

173 stars 61 forks source link

[FR] Ability to specify non-relative timeframe #146

Open rc-csmith opened 1 year ago

rc-csmith commented 1 year ago

Which category is the feature part of?

[ ] Definition File
[x] Code/Logic Feature
[ ] Other (please explain)

Which product is the feature part of?

[x] All Products
[ ] Carbon Black Response
[ ] Carbon Black Threat Hunter
[ ] Defender for Endpoints
[ ] SentinelOne
[ ] Cortex
[ ] Other

Use Cases

There are instances where you need to search a specific range (e.g. July 1st to July 3rd) and not the last X days/minutes.

Proposal

Have the ability to specify start and end timestamps when running Surveyor

Additional Context

N/A