Documentation
Hunt

Saved searches

Store and reopen Hunt queries.

Use Save on the Hunt toolbar to store the current query, scope, and view. Use Saved Searches to reopen a stored search.

Typical reasons to save a search:

  • A case-scoped query you reopen during the investigation.
  • A platform-wide hunt you run after each processing run.
  • A dashboard view you share with the team by name.

Name searches so the case and the question are obvious, for example phishing-7-failed-logons-24h.