Validin Adds CIDR and ASN Filters and Updates YARA Statistics
Summary
Validin’s Advanced Search now supports CIDR and ASN network filters, while updated YARA statistics track newly observed and total indicators to help analysts assess rule results.
Key points
- Advanced Search accepts CIDR blocks in compatible IP fields, including dns.a, dns.aaaa, and services.ip.
- A global network filter accepts a CIDR or ASN and limits returned IP addresses to that network’s announced prefixes.
- Network filters can be combined with other query-language filters without changing domain results.
- YARA summaries now chart new indicators observed each day over the past seven UTC days and show total indicators in a rule’s result set.
- Advanced Search remains in beta for enterprise customers; Validin says it plans to make it available to community users after beta ends later this year.
Article Details
- Event Type
- Feature update to Validin's Advanced Search and YARA interfaces.
- Impact
- Advanced Search supports CIDR and ASN network filters, enabling users to narrow network query results. YARA summaries now show newly observed indicators per day and total indicators instead of total matches per day. Advanced Search remains in beta for enterprise customers; community availability is planned after the beta ends.