Validin Launches Advanced Search with VQL and Investigation Workflow Features

· Original article ↗

Summary

Validin introduced a beta Advanced Search experience for enterprise customers, using VQL to query services, DNS, and registration data. Features include same-observation matching, Quick Pivots, and tools to track and revisit search workflows.

Key points

  • The beta Advanced Search experience is available to Validin enterprise customers.
  • Validin Query Language (VQL) supports structured queries across services, DNS, and registration data.
  • Conditions within a data group must match the same observation window, which Validin says helps reduce false positives in time-bound searches.
  • Autocomplete, real-time syntax validation, and inline guidance assist with query construction.
  • Quick Pivots can pre-populate queries, including one for finding domains with similar registration patterns.
  • Search Sessions and an improved Pivot History help analysts revisit searches and trace pivots between indicators.

Article Details

Event Type
Validin launched a redesigned Advanced Search experience powered by the Validin Query Language (VQL), available in beta to enterprise customers.
Impact
The release enables structured searches across services, DNS, and registration data, with same-observation matching intended to reduce false positives. Autocomplete, validation, Quick Pivots, and Search Sessions support faster investigations and help analysts track and revisit related searches.

Vendors

Products

Related Articles