Hello, In this video we'll demo the new search and search capabilities with Quest IT security search. Suppose you've had a data leak and you want to investigate who except the administrators had access to a specific file. With search and search capabilities available, you can use a single combined search to get data that couldn't be obtained by a regular search. Now you get the account names of all employees who are not in the administration department and who tried to open the file.
Let's see how search and search works. You type in expression to find all users that aren't in administration, and you add the pipe character and type the next expression. That subsequent expression will be applied to the results of the expression to the left of the pipe. Repeat that as many times as needed.
After the results are found, you find some suspicious events. Here a person who isn't in administration opened the file successfully. Thank you for watching. For more information, please visit quest.com.
01:06