As I recall, this is severely limited in that it does not correctly support sub-searches or pivoting between different indexes. Any news on if this has been improved?
128 karma · joined December 14, 2020
Now I see why this works. Good trick either way.
That's really useful. I like it.
Sure it may have been used for malware, but given those IPs float between ephemeral cloud instances, it does not mean it is currently being used for malware.