A TQL search clause identifies specific data using exact matches, comparisons, ranges, and parenthetical expressions. These search expressions typically use field-value pairs to define the location criteria.
This section covers:
Searches
- Published on Aug 26, 2026
- 1 minute(s) read
Was this article helpful?
Related articles
- Endpoint Detection and Response with Forensics (EDRF) > EDRF On-prem > EDRF On-prem installation > Historical Search Module > Anatomy of a TQL query > Searches > Syntax elements
- Endpoint Detection and Response with Forensics (EDRF) > EDRF On-prem > EDRF On-prem installation > Historical Search Module > Anatomy of a TQL query > Searches
- Endpoint Detection and Response with Forensics (EDRF) > EDRF On-prem > EDRF On-prem installation > Historical Search Module > Anatomy of a TQL query > Searches > Syntax elements