Data Forensics Filter Bar

The Data Forensics Filter Bar is a powerful tool in the Main Table configuration options that allows you to filter the Main Table data to find specific affected machines. The Filter Bar supports chaining multiple filters using logical operators such as AND to narrow results.

To use the Filter Bar:

1. Click the Filter Bar

2. Select a group by In Workspaces Data Forensics, a dimension (e.g. application, host, service, client IP) that you choose from the sidebar to load data into the main table. Data is aggregated or broken down by that dimension. The sidebar lists available group bys for the selected analysis workspace.

3. Select applicable operation

4. Select the specific data.

   Note: You may end your query here, or continue specifying. Depending on the group by and data selected, you may have more options to specify.

5. Click the magnifying glass icon to begin the search.

Filter Bar Example

The following describes an example using the filter bar to find machines using Aternity Agent from a Windows 11 Enterprise device.

1. Click the Filter Bar.

2. Select Applications group by.

3. Select equals.

4. Select Aternity Agent.

5. Select AND.

6. Select OS Type.

7. Select equals.

8. Select Windows 11 Enterprise.

9. Click the magnifying glass icon.

You now have the individual machines using Aternity Agent from a Windows 11 Enterprise OS device. You can select any row in the table to drill down further in the Widgets Pane.