Timestamp - Accessed

Searches for an access time. Windows and macOS host endpoints can be searched using this token.

Valid timestamps must fall between January 1, 1970, UTC and January 19, 3:14:07, 2038, UTC. (HXEP-5936 & HXEP-6081)

Field Format	Exhaustive Search?	Exhaustive Search Details
timestamp	Optional	Includes searching for a file on disk. Allows you to filter by path name and specify the following disk search options: folder depth minimum file size maximum file size

Field Format

Exhaustive Search?

Exhaustive Search Details

timestamp

Optional

Includes searching for a file on disk.

Allows you to filter by path name and specify the following disk search options:

folder depth
minimum file size
maximum file size

At this time, requests for browser file and cookie data returns limited fields of data due to current limits in agent data collection. (HXEP-10314, HXEP-6100, HXEP-6102)