Getting Started with Core Impact | Using Search

In this video, you'll learn how to save time finding what you're looking for by utilizing the search functionality in Core Impact.

 

 

 


 

Module Search

One of the helpful features of Core Impact is the ability to search through several different parts of the interface. You have the ability to search through the executed modules in many different ways.

If you want to see modules executed for a specific host, you can search for the host IP in the search field of the “Executed Modules” window. You can also search for running or finished modules by typing in those keywords in the search bar.

Image
Core Impact Host Module Search Screen

Search Folder

There is also a search folder to create a search for a specific criteria such as agent, port, service, architecture, hostname, IP, or OS. When you select operating system, you can specify which operating systems you want to search for.

Image
Core Impact Search Folder Screen

In this example we’re going to create a search for unknown operating systems. Now all the unknown operating system machines will be listed in the newly created folder. This allows you to simple go to the “OS detection” module and pull it over to the new folder to identify the operating systems for the machines all at once.

Image
Core Impact Unknown OS Search Folder Screen