Date Filters

Date filters allow you to filter advanced search results by date-related values.

Filtering by Date Created

Complete the following procedure to filter Advanced Search results by the date the objects were created.

1. Click on the Filters option and select Date Created.

   The Date Created dialog box opens.
   

2. Select one of the following options to determine how the filter is applied:

   Option	Result
   is	Search results include the specified date.
   is not	Search results exclude items from a range of dates.
   is before	Search results include items before a selected date
   is after	Search results include items after a selected date
   is between	Search results include items in a selected range of dates
   is greater than	Search results include items have exceeded their expiration date by a selected number of days.
   is within the last	Search results include items within the selected number of days.

3. Use the controls to select date options based upon the selection in step 2.
4. Click Save.

Filtering by Last Modified

Complete the following procedure to filter Advanced Search results by the date objects were last modified.

1. Click on the Filters option and select either Last Modified.

   The Last Modified dialog box opens.
   

2. Select one of the following options to determine how the filter is applied:

   Option	Result
   is	Search results include the specified date.
   is not	Search results exclude items from a range of dates.
   is before	Search results include items before a selected date
   is after	Search results include items after a selected date
   is between	Search results include items in a selected range of dates
   is greater than	Search results include items have exceeded their expiration date by a selected number of days.
   is within the last	Search results include items within the selected number of days.

3. Use the controls to select date options based upon the selection in step 2.
4. Click Save.

Filtering by Published Date

The Published Date is the date that an object was originally published by the source. This is not to be confused with when the object was ingested into ThreatQ.

1. Click on the Filters dropdown option for a filter set and select Published Date.
   

   The Published Date dialog box opens.
   

2. Select the Source that published the object.
3. Select one of the following options to determine how the filter is applied:

   Option	Result
   is	Search results include the specified date.
   is not	Search results exclude items from a range of dates.
   published before	Search results include items before a selected date
   published after	Search results include items after a selected date
   published between	Search results include items in a selected range of dates
   is greater than	Search results include items have exceeded their expiration date by a selected number of days.
   published within the last	Search results include items within the selected number of days.

4. Select Date, Time, and Time Zone for the filter to use.
5. Click Save.

Filtering by Source Ingest Time

The Source Ingest Time is the date that an object was ingested into ThreatQ.

1. Click on the Filters dropdown option for a filter set and select Source Ingest Time.
   

   The Source Ingest Time dialog box opens.
   

2. Select the Source that published the object.

   You have the option to select Any Source.

3. Select one of the following options to determine how the filter is applied:

   Option	Result
   is	Search results include the specified date.
   is not	Search results exclude items from a range of dates.
   created before	Search results include items before a selected date
   created after	Search results include items after a selected date
   created between	Search results include items in a selected range of dates
   is greater than	Search results include items have exceeded their expiration date by a selected number of days.
   created within the last	Search results include items within the selected number of days.

4. Select Date, Time, and Time Zone for the filter to use.
5. Click Save.

Filtering by Expiration Date

You can narrow down the Indicators in your search results by the expiration date.

1. Click on the Filters dropdown option for a filter set and select Expiration Date.

   If you are currently viewing system indicators in the Threat Library, you can click on the Expiration Quick Filter located above the search results.
   

   The Expiration Date dialog box opens.

2. Select one of the following options to determine how the filter is applied:

   Option	Result
   is	Search results include the specified date.
   is not	Search results exclude items from a range of dates.
   is after	Search results include items after a selected date.
   is before	Search results include items before a selected date.
   is between	Search results include items in a selected range of dates.
   is greater than	Search results include items have exceeded their expiration date by a selected number of days.
   is within the last	Search results include items within the selected number of days.
   is within the next	Search results include items within a range of future dates.
   is protected from auto-expiration	Search results include items that are protected from auto-expiration.

3. Based on the filter option you selected, select the date, date range, or number of days for the filter to use.
4. Click Submit.