Searches for indications that a file signature is verified. Windows and macOS host endpoints can be searched using this token. Exhaustive searches apply only to Windows endpoints.
Field Format | Exhaustive Search? | Exhaustive Search Details |
|---|---|---|
boolean | Optional (Windows only) | Includes searching for a file on disk, a kernel driver, or a process. Allows you to filter by Windows path name and specify the following disk search options:
|