Managing Groups

Interrogate uses groups in which to categorize information and perform searches. Groups are created for endpoints, keywords, file names, file owners, hash values and extensions. 

Groups are created using the gear icon at the end of each row on the Search Criteria page. 

Creating a group

1. Click on the "gear" icon at the end of a desired row
2. Click the "Create New Group" button in the upper right corner of the grid
3. Input your group name
4. Select from the "Available List" or use the "Add" button if available
5. Select "Save Group" to save and auto select your group

Editing a group

1. Click on the "gear" icon at the end of a desired row
2. Locate your desired group and click on the pencil icon 
3. Use the available column or add button to add new selections or click on an included item and use the right pointing arrow  to move the item back to the available list.

Removing a group

1. Click on the "gear" icon at the end of a desired row
2. Locate your desired group and click on the trash can icon 
3. You will be prompted to verify that you would like to remove the group. Click "OK" to completely remove the group from being used.

Steps to Create a Group

Click on the Gear Icon

Click on Create New Group

Input your group name

Select from the Available List or use the "Add" button for file names, keywords or hash values

Back - Search Criteria