Interrogate uses groups in which to categorize information and perform searches. Groups are created for endpoints, keywords, file names, file owners, hash values and extensions.

Groups are created using the gear icon at the end of each row on the Search Criteria page.

Creating a group

Click on the "gear" icon at the end of a desired row
Click the "Create New Group" button in the upper right corner of the grid
Input your group name
Select from the "Available List" or use the "Add" button if available
Select "Save Group" to save and auto select your group

Editing a group

Click on the "gear" icon at the end of a desired row
Locate your desired group and click on the pencil icon
Use the available column or add button to add new selections or click on an included item and use the right pointing arrow to move the item back to the available list.

Removing a group

Click on the "gear" icon at the end of a desired row
Locate your desired group and click on the trash can icon
You will be prompted to verify that you would like to remove the group. Click "OK" to completely remove the group from being used.

Included items will always remain in the available column for future need.

Steps to Create a Group

Click on the Gear Icon

Click on Create New Group

Input your group name

Select from the Available List or use the "Add" button for file names, keywords or hash values

Back - Search Criteria

Browser not supported