Searches for a SHA256 file hash. Windows and macOS host endpoints can be searched using this token.
Field Format | Exhaustive Search? | Exhaustive Search Details |
|---|---|---|
sha256hash | Optional | Includes searching for a file on disk, a kernel driver, or a process. Allows you to filter by path name and specify the following disk search options:
|