In this article:
Use this page as a reference when writing your own search queries in Attack Surface Intelligence). Each section lists acceptable expressions for facets in the ASI queries.
Note: We may update these query elements at any time and publish updates in this article on a quarterly basis. To inquire about query elements you do not see on this list, submit a Support request.
See an overview of ASI.
Acceptable expressions for the industry facet
See this list for values that you can query for with the industry facet.
Example: industry:'HEALTHCARE'
CONSTRUCTION
EDUCATION
ENERGY
ENTERTAINMENT
FOOD
FINANCIAL_SERVICES
GOVERNMENT
MANUFACTURING
HEALTHCARE
HOSPITALITY
INFORMATION_SERVICES
LEGAL
NON_PROFIT
PHARMACEUTICAL
RETAIL
TECHNOLOGY
TELECOMMUNICATIONS
TRANSPORTATION
UNKNOWN
Acceptable expressions for the os_type facet
See this list for values that you can query for with the os_type facet.
Example: os_type:'Windows Server 2012'
2-Series
6000
AIX
AOS
AmigaOS
Android
ArrayOS
AsyncOS
AsyncOS 10.1.5-037
AsyncOS 10.5.2-072
AsyncOS 11.5.1-115
AsyncOS 11.5.2-020
AsyncOS 11.7.0-407
AsyncOS 11.7.0-418
AsyncOS 11.8.0-453
AsyncOS 11.8.3-021
AsyncOS 12.0.1-334
AsyncOS 12.0.3-007
AsyncOS 12.5.1-043
AsyncOS 12.5.2-007
AsyncOS 12.5.3-002
AsyncOS 12.5.4-011
AsyncOS 14.0.1-053
AsyncOS 14.0.2-012
AsyncOS 14.1.0-032
AsyncOS 14.5.0-498
AsyncOS 14.5.0-537
AsyncOS 9.2.0-809
BSD
Bada
CacheOS
Comware
Data ONTAP
Digital UNIX
Dopra Linux
DragonFlyBSD
ExtremeWare
ExtremeXOS
FortiOS
FreeBSD
FreeBSD 10.4-STABLE
FreeBSD 12.3-RELEASE-p3
FreeBSD 13.0-RELEASE-p6
FreeBSD 13.1-RELEASE
FreeBSD 8.0
FreeBSD 8.2-RELEASE-p9
Funkwerk BOSS
HP-UX
HyNetOS
IBM
IOS
IOS XR
IPC@CHIP-RTOS 1.50
IPC@CHIP-RTOS 1.54
IPC@CHIP-RTOS 1.60
IPC@CHIP-RTOS 1.70
IPC@CHIP-RTOS 1.80
IPC@CHIP-RTOS 1.90
IPC@CHIP-RTOS 2.03
IPC@CHIP-RTOS 2.04
IPC@CHIP-RTOS 2.06
IPC@CHIP-RTOS 2.08
IRIX
JACE_404
JACE_51x
JUNOS
LINUX
Linux
Linux (running RONGAN NDMP from
Linux (running Rongan from Ronga)
Linux 2.2.18
Linux 2.4
Linux 2.4.14
Linux 2.4.17
Linux 2.4.20-28.8
Linux 2.6
Linux 2.6.15-1.2054_FC5smp
Linux 2.6.17.8
Linux 2.6.18
Linux 2.6.18-419.el5PAE
Linux 2.6.20.
Linux 2.6.21
Linux 2.6.21.68
Linux 2.6.21.71
Linux 2.6.21.72
Linux 2.6.22.18-6281
Linux 2.6.22.19
Linux 2.6.30
Linux 2.6.31.6-fast-20110114
Linux 2.6.31.8
Linux 2.6.31.8.duov2
Linux 2.6.32
Linux 2.6.32-042stab127.2
Linux 2.6.32-431.el6.x86_64
Linux 2.6.32.19-0.3-pae
Linux 2.6.34
Linux 2.6.35
Linux 2.6.36.4brcmarm
Linux 2.6.39.3
Linux 2.6.39.4
Linux 2.6.9
Linux 3.0.8
Linux 3.10
Linux 3.10.0
Linux 3.10.0_s40
Linux 3.10.102
Linux 3.10.107-UBNT
Linux 3.10.108
Linux 3.10.14
Linux 3.10.23
Linux 3.10.33
Linux 3.10.40
Linux 3.10.70
Linux 3.10.84-g6dfdde5
Linux 3.10.86
Linux 3.10.86-gfbb1a67
Linux 3.12.20
Linux 3.13.0-170-generic
Linux 3.13.0-71-generic
Linux 3.14.29
Linux 3.14.79
Linux 3.16.0
Linux 3.16.0-4-orion5x
Linux 3.16.7-35-desktop
Linux 3.18.12-gentoo
Linux 3.18.24_hi3798mv2x
Linux 3.18.31-perf
Linux 3.18.31-perf-g7a6f4983
Linux 3.18.44
Linux 3.18.67
Linux 3.2
Linux 3.2.0-65-generic-pae
Linux 3.2.34-1-FARM
Linux 3.3.4-5.fc17.i686.PAE
Linux 3.3.8
Linux 3.3.8-20131007-INSTA
Linux 3.4
Linux 3.4.105.6
Linux 3.4.107.36
Linux 3.4.108.48
Linux 3.4.108.53
Linux 3.4.108.61
Linux 3.4.110.100
Linux 3.4.110.74
Linux 3.4.110.82
Linux 3.4.110.88
Linux 3.4.110.95
Linux 3.4.110.99
Linux 3.4.111.109
Linux 3.4.112.113
Linux 3.4.112.114
Linux 3.4.112.116
Linux 3.4.113
Linux 3.4.113.130
Linux 3.4.113.133
Linux 3.4.113.138
Linux 3.4.113.142
Linux 3.4.113.147
Linux 3.4.113.150
Linux 3.4.113.151
Linux 3.4.113.155
Linux 3.4.113.156
Linux 3.4.113.157
Linux 3.4.113.159
Linux 3.4.113.161
Linux 3.4.113.163
Linux 3.4.113.166
Linux 3.4.113.169
Linux 3.4.113.171
Linux 3.4.113.174
Linux 3.4.113.175
Linux 3.4.113.183
Linux 3.4.113.184
Linux 3.4.113.296
Linux 3.4.26
Linux 3.4.5
Linux 3.4.6
Linux 3.4.67_s40
Linux 3.5.7
Linux 3.9.5-301.fc19.x86_64
Linux 4.1.0
Linux 4.1.16
Linux 4.1.18
Linux 4.1.52
Linux 4.14.116
Linux 4.14.117-perf-g4119135
Linux 4.14.117-perf-ga158cd7
Linux 4.14.141-ga540ec5
Linux 4.14.141-perf-g52ed0e6
Linux 4.14.154
Linux 4.14.171
Linux 4.14.180
Linux 4.14.180-perf-gb24d113
Linux 4.14.180-perf-gbe393a6
Linux 4.14.180-perf-gf549064
Linux 4.14.186-22267077
Linux 4.14.186-g01e376f3f209
Linux 4.14.186-g4e67417e00b9
Linux 4.14.186-g92c2b4281d6d
Linux 4.14.186-ga715ffbf0569
Linux 4.14.186-gafd00fb29714
Linux 4.14.186-gbc682460573f
Linux 4.14.186-gcdbddd16e223
Linux 4.14.186-ge0f43d66bade
Linux 4.14.193
Linux 4.14.221
Linux 4.14.267
Linux 4.14.65-gentoo
Linux 4.14.94
Linux 4.14.x
Linux 4.15.0
Linux 4.15.0-101-generic
Linux 4.15.0-1060-aws
Linux 4.15.0-122-generic
Linux 4.15.0-136-generic
Linux 4.15.0-147-generic
Linux 4.15.0-161-generic
Linux 4.15.0-162-generic
Linux 4.15.0-184-generic
Linux 4.15.0-189-generic
Linux 4.15.0-66-generic
Linux 4.15.0-88-generic
Linux 4.15.18-12-pve
Linux 4.18.0
Linux 4.19.0
Linux 4.19.0-10-amd64
Linux 4.19.0-16-amd64
Linux 4.19.0-18-amd64
Linux 4.19.0-21-amd64
Linux 4.19.0-9-amd64
Linux 4.19.113-21455571
Linux 4.19.113-23195093
Linux 4.19.113-23725773
Linux 4.19.113-23978550
Linux 4.19.113-24235558
Linux 4.19.122
Linux 4.19.138
Linux 4.19.81-perf-g57e9aae
Linux 4.19.81-perf-gb2d6a49
Linux 4.19.81-perf-gb895fc2
Linux 4.19.91
Linux 4.4
Linux 4.4.0
Linux 4.4.0-116-generic
Linux 4.4.0-122-generic
Linux 4.4.0-127-generic
Linux 4.4.0-142-generic
Linux 4.4.0-152-generic
Linux 4.4.0-194-generic
Linux 4.4.111-15325116
Linux 4.4.180+
Linux 4.4.205-20954136
Linux 4.4.24
Linux 4.4.35
Linux 4.4.38
Linux 4.4.52
Linux 4.9.0-14-amd64
Linux 4.9.118
Linux 4.9.119
Linux 4.9.186-perf-g83532fd
Linux 4.9.227-perf-g4e7b1e0
Linux 5.10.0-10-amd64
Linux 5.10.0-13-amd64
Linux 5.10.0-16-amd64
Linux 5.10.0-3-amd64
Linux 5.10.107
Linux 5.10.11-gentoo
Linux 5.10.113
Linux 5.10.118
Linux 5.10.133
Linux 5.10.46
Linux 5.10.60-qnap
Linux 5.10.84
Linux 5.10.88
Linux 5.10.99
Linux 5.11.0
Linux 5.13.x
Linux 5.15.0-40-generic
Linux 5.15.0-41-generic
Linux 5.15.32_1
Linux 5.15.35-1-lts
Linux 5.15.37-gentoo-dist
Linux 5.17.0-3-686-pae
Linux 5.17.5-arch1-1
Linux 5.18.0-pf3
Linux 5.18.14-amdgpu
Linux 5.18.16-200.fc36.x86_64
Linux 5.18.16-arch1-1
Linux 5.4.0
Linux 5.4.0-122-generic
Linux 5.4.0-65-generic
Linux 5.4.0-77-generic
Linux 5.4.0-80-generic
Linux 5.4.0-81-generic
Linux 5.4.108
Linux 5.4.132
Linux 5.4.162
Linux 5.4.162-1-pve
Linux 5.4.17
Linux 5.4.175
Linux 5.4.187
Linux 5.4.190
Linux 5.4.78-2-pve
Linux 5.4.80-gentoo-r1
Linux 5.4.85
Linux 5.4.91
Linux 5.4.x
Linux 5.7.6-x86_64-linode136
Linux Cross_compiled
Linux OS
MQX RTOS
Mac OS
Mac OS 9
Mac OS X
Mac OS X 10.4.0
Mac OS X Server
MacOS
NET+OS
NET+OS 5
NT
NetApp
NetBSD
NetBSD 8.1
NetWare
Nut/OS
OS X
OS/2
OS/390
OS/400
OneOS
OpenBSD
OpenRT
OpenVMS
Plan 9
QNX
RouterOS
SCO UNIX
SGOS
SOC OS
SmartWare
SmartWare 4.2
Solaris
SunOS
THEOS
TiMOS C-2.1.R7
TiMOS C-8.0.R6
Tru64 UNIX
Ultrix 4.1
Unix
VMS
VRP
VRP 3.1
VRP 3.3
VRP 3.4
VRP 3.40
VRP 5.0
VRP 5.20
VxWorks
VxWorks 5.4.2
Windows
Windows 10
Windows 10 IoT Core
Windows 2000
Windows 2003
Windows 7
Windows 7 SP1 build 6.1.7601
Windows 8
Windows 8.1
Windows CE 3.0
Windows CE 4.0
Windows CE 4.10
Windows CE 4.20
Windows CE 5.
Windows CE 5.0
Windows CE 6.0
Windows CE 6.00
Windows CE 7.0
Windows CE 7.00
Windows CE 8.0
Windows NT
Windows Server 2003
Windows Server 2008
Windows Server 2008 R2
Windows Server 2008 R2 - 2012
Windows Server 2012
Windows Server 2012 R2
Windows Server 2016
Windows Server 2019
Windows Vista
Windows XP
XOS
ZentriOS
ZyNOS
iOS
ipOS 7.0
linux
pSOS
uCOS
windows
z/OS
z/VM 7.10
z/VM 7.20
z/VSE
Acceptable expressions for the device_type facet
See this list for values that you can query for with the device_type facet.
Example: device_type:'webcam'
PBX
PDA
VoIP adapter
VoIP phone
WAP
bridge
broadand router
broadband router
firewall
load balancer
media device
phone
power-device
power-misc
print server
printer
proxy server
remote management
router
security-misc
specialized
specializied
storage-misc
switch
telecom-misc
terminal
terminal server
webcam
Acceptable expressions for the threat_actor facet
See this list for values that you can query for with the threat_actor facet.
Example: threat_actor:'APT29'
APT BISMUTH
APT-C-23
APT-C-27
APT1 Comment Crew
APT10
APT12
APT15
APT16
APT17
APT18
APT19
APT2
APT27
APT28
APT29
APT3
APT30
APT31
APT32
APT33
APT34
APT35
APT36
APT37
APT38
APT39
APT40
APT41
APT5
Agrius APT
Antlion APT
Axiom
BackdoorDiplomacy
Bitter APT
BlackOasis APT
BlackTech
BlackTech APT
Bluenoroff
Bronze Butler APT
CURIUM APT
Calypso APT
Carbanak
Chimera APT
Cobalt Group
CopyKittens
Dark Caracal APT
DarkHotel Group
DarkHydrus
DeepBlueMagic APT
DragonFly
DragonOK APT
ELECTRUM
EmpireMonkey
Energetic Bear
Equation Group
Evil Corp
Evilnum
FIN6
FIN7
FIN8
Fox Kitten APT
Gallmaker Group
Gamaredon Group
Gaza Cybergang
Ghostwriter
Goblin Panda
Gold Lowell
Gorgon Group
Gossipgirl
Hafnium Group
IRIDIUM
Ice Fog APT
IndigoZebra
Iron Tiger APT
IronHusky
Karma Panda
Keyhole Panda
Kimsuky
LYCEUM
Lazarus Group
Leafminer
Lotus Blossom Group
LuminousMoth
Lunar Spider
Lyceum APT
MalKamak
Mikroceen APT
ModifiedElephant
Molerats
Moses Staff APT
MuddyWater
MuddyWater Group
Mustang Panda
Naikon
Neodymium Group
Night Dragon
Orangeworm
Pacha Group
Packrat
Patchwork
Pirate Panda
Platinum Group
Poseidon Group
Praying Mantis
Promethium Group
RASPITE
Rancor Group
RedEcho
Roaming Mantis
Rocket Kitten
Sandworm
Sandworm Team
Scarab APT
Scarlet Mimic APT
SideCopy
SideWinder
SideWinder APT
Silence Hacker Group
Silent Chollima
Silent Librarian
SilverFish APT
Sofacy
Sowbug APT
SparklingGoblin
Spiral Group
Sprite Spider
Stealth Falcon APT
Suckfly
TA410
TA413
TA428
TA459
TA505
TA542
Taidoor
TeleBots
The Shadow Brokers
The White Company
Tortoiseshell
Tropic Trooper
Turla APT Group
UNC1945
UNC2452
UNC2630
UNC2717
Viceroy Tiger
Vicious Panda
Void Balaur APT
Volatile Cedar APT
Volatile Kitten
WIZARD SPIDER
WhisperGate
Wicked Spider
Winnti Group
Zebrocy Group
Acceptable expressions for the crawling_detected_library_name facet
See this list for values that you can query for with the crawling_detected_library_name facet.
Example: crawling_detected_library_name:'WordPress'
LABjs
IfVisible.js
Drupal
Velocity.js
FastClick
Kendo UI
jQuery UI
Next.js
Popcorn.js
lit-html
SproutCore
Modernizr
TYPO3
Tween.js
RightJS
gRaphaë
WordPress
Lo-Dash
boomerang.js
core-js
Leaflet
Material Design Lite
jQuery
Joomla
Create React App
SWFObject
Sea.js
Preact
Google Maps
Pusher
Can
CreateJS
Matter.js
GWT
CamanJS
Dojo
ScrollMagic
AmplifyJS
YUI 3
Marionette
AMP
ControlJS
Mapbox
Wix
Hammer.js
Moment.js
Riot
Angular
Head JS
Socket.IO
Highcharts
FlexSlider
Paper.js
RequireJS
Shopify
Guess.js
Mustache
MooTools
Ink
GreenSock JS
Handlebars
Fabric.js
Magento
Zepto.js
Moment Timezone
Closure Library
Bootstrap
Wiz
Marko
Isotope
Ext JS
Nuxt.js
Swiffy
Two
Knockout
October CMS
Pixi.js
AngularJS
three.js
jQuery Tools
Gatsby
Zurb
YUI 2
Rico
Spry
FuseJS
React
Vue
Scriptaculous
Vaadin
jQuery Mobile
Backbone
Prototype
D3
Polymer
yepnope
Ember.js
SPF
Spine
WebFont Loader
Glow
Visibility.js
Acceptable expressions for the infections_family facet
See this list for values that you can query for with the infections_family facet.
Example: infections_family:conficker
adware.am15
adware.android.admob
adware.android.apalytic
adware.android.applovin
adware.android.digitime
adware.android.erosuper
adware.android.ewind
adware.android.galaxy
adware.android.haios
adware.android.imp
adware.android.lile
adware.android.mobidash
adware.android.mobidash.b
adware.android.pmain
adware.eorezo
adware.grambler
adware.loadmoney
adware.newnextme
adware.pasteboardhelper
adware.sasquor
adware.webviewerpro
android.bakdoor.prizmes
android.bankbot
android.banker.anubis
android.dianshangsale
android.digitime.fota
android.fakeav
android.fakebank
android.fobus
android.fungram
android.gopl
android.hqwar
android.hummer
android.iop
android.joker
android.provar
android.rootnik
android.skyfin
android.smsbot
android.smsspy
android.smsspy.be24
android.sssaaa
android.teleplus
android.uupay
android.yunclound
andromeda
apt.winnti
bazarloader
bebloh
bedep
bitcoinminer
blakamba
caphaw
carberp
chinad
coinminer
conficker
cryptowall
cve.2016.6564
cycbot
diaminer
dircrypt
disorderstatus
dofoil
dorkbot
downloader.bitcoinminer
esfury
expiro
exploitkit.fallout
extenbro
fake_cs_updater
flashback
fobber
generic.443
generic.malware
generic_malware
gozi
gspy
hermit
jadtre
js.worm.bondat
kasidet
kidminer
koobface
kwampirs
lethic
linux.backdoor.setag
linux.ngioweb
loader
magecart
matrix
minr
mkero
monero
muddywater
murofet
mysafeproxymonitor
nametrick
necurs
netsupport
nettraveler
neurevt
nivdort
osx.fakeflash
pitou
poseidon
powerstats
presenoker
proxyback
pua.android.ammob
pua.android.cheetah
pua.contentprotector
pua.ghokswa
pua.luckypatcher
pva.android.tingz
pva.carrottrack
pva.dancevalidator
pva.dyupbydns
pva.instaladds
pva.intowow
pva.mmsrcs
pva.mvmaster
pva.nsapm
pva.pixelging
pva.samsunghub
pva.soundink
pva.torrent.iamhansen
pva.torrent.kickasstracker
pva.torrent.octodb
pva.torrent.open-tracker
pva.torrent.openinternet
pva.torrent.p2pcache
pva.torrent.publicbt
pva.torrent.publictorrent
pva.torrent.torrentson
pva.torrent.unblckd
pva.tracker.cxrt
pva.wmob
pws.pony
pykspa
qqblack
qrypter.rat
qsnatch
racoon
ramdo
ramnit
renocide
routex
ryuk
sality
sgminer
shifu
shiz
sodinokibi
sphinx
stantinko
teleru
tesch
trickbot
trojan.autoit
trojan.click3
trojan.iframe
trojan.includer
trojan.win32.razy.gen
unknown
vawtrak
verst
virut
wauchos
win.neurevt
worm.phorpiex
worm.rimecud
wowlik
wrokni
xcodespy
xmrminer
xshellghost
yoddos
zeus
zeus_gameover
zeus_panda
zloader
Acceptable expressions for the malicious_reputation facet
(for threat feeds only)
See this list for values that you can query for with the malicious_reputation facet that are among the 11,000+ options but are only intelligence feeds.
Example: malicious_reputation:'[CISA|CERT] - Public Feed'
Note: We may update these expressions at any time and publish updates in this article on a quarterly basis. To inquire about expressions you do not see on this list, submit a Support request.
Benkow.cc RAT feed
Bitcoin Nodes feed
CI-ARMY feed
CISA - KNOWN EXPLOITED VULNERABILITIES CATALOG feed
CyberCure - IP Feed feed
DNS CH TXT version.bind feed
DNS recursion desired IN ANY feed
DNS recursion desired feed
DigitalSide Malware report: MD5: ee35165feed0bd0e639e3719015c6803
ET Compromised IPs feed
Feodo IP Blocklist feed
IP protocol 41 feed
IPsum (aggregation of all feeds) - level 1 - lot of false positives feed
IPsum (aggregation of all feeds) - level 2 - medium false positives feed
IPsum (aggregation of all feeds) - level 3 - low false positives feed
IPsum (aggregation of all feeds) - level 4 - very low false positives feed
IPsum (aggregation of all feeds) - level 5 - ultra false positives feed
IPsum (aggregation of all feeds) - level 6 - no false positives feed
IPsum (aggregation of all feeds) - level 7 - no false positives feed
IPsum (aggregation of all feeds) - level 8 - no false positives feed
MYIP.MS Blacklist feed
Panels Tracker feed
Rutgers Drop List feed
SMTP data feed
SMTP greet feed
SSC.TI.Research.BlogFeed
SSH Bruteforce IPs feed
TELNET login feed
Telnet Bruteforce IPs feed
Tor ALL nodes feed
Tor exit nodes feed
VNC RFB feed
[CISA|CERT] - Public Feed
alienvault reputation generic feed
blocklist.de/lists/all.txt feed
blocklist.greensnow.co feed
blockrules of rules.emergingthreats.net feed
ci-badguys.txt feed
cybercrime-tracker.net - all feed
ip-block-list - snort.org feed
ipspamlist feed
mirai.security.gives feed
pop3gropers feed
sipinvitation feed
sipquery feed
sipregistration feed
sshpwauth.txt feed
tweetfeed.live - Daily feed
Acceptable expressions for the ransomware_group facet
See this list for values that you can query for with ransomware_group.
Example: ransomware_group:'CONTI'
|
DAIXIN |
|
Metaencryptor |
|
VSOP |
|
NoEscape |
|
ALPHV |
|
Hive |
|
Black Suit |
|
Revil |
|
Bl@cktor |
|
Payload.bin |
|
BlackByte |
|
Mallox |
|
Babuk |
|
Royal |
|
Cuba |
|
Rhysida |
|
noname |
|
CiphBit |
|
LOCKBIT3.0 |
|
Dunghill |
|
Play |
|
Money Message |
|
Lorenz |
|
SNATCH |
|
AvosLocker |
|
Cactus |
|
CL0P |
|
BlackBasta |
|
RANSOMEXX |
|
Everest |
|
ThreeAM |
|
BianLian |
|
INC Ransom |
|
AlphaVM |
|
LOCKBIT2.0 |
|
RansomHouse |
|
CryptNet |
|
Qilin |
|
Abyss |
|
KARAKURT 2.0 |
|
Quantum |
|
CONTI |
|
vice |
|
LV |
|
Ragnar_Locker |
Acceptable expressions for the cloud_region facet
Go to any cloud provider's documentation page for values that you can query for with the cloud_region facet by cloud_provider.
Example: cloud_region:'us-east-1'
Amazon Web Services (AWS): https://docs.aws.amazon.com/general/latest/gr/aws-ip-ranges.html
Google Cloud Platform (GCP): https://cloud.google.com/compute/docs/ip-addresses
Microsoft Azure: https://www.microsoft.com/en-us/download/details.aspx?id=56519
Oracle: https://docs.oracle.com/en-us/iaas/Content/General/Concepts/addressranges.htm
GLOBAL
af-johannesburg-1
af-south-1
ap-chuncheon-1
ap-east-1
ap-hyderabad-1
ap-melbourne-1
ap-mumbai-1
ap-northeast-1
ap-northeast-2
ap-northeast-3
ap-osaka-1
ap-seoul-1
ap-singapore-1
ap-south-1
ap-south-2
ap-southeast-1
ap-southeast-2
ap-southeast-3
ap-southeast-4
ap-sydney-1
ap-tokyo-1
asiaeast
asiasoutheast
australiac
australiac2
australiaeast
australiasoutheast
brazilse
brazilsouth
ca-central-1
ca-montreal-1
ca-toronto-1
canadacentral
canadaeast
cn-north-1
cn-northwest-1
eu-amsterdam-1
eu-central-1
eu-central-2
eu-frankfurt-1
eu-marseille-1
eu-milan-1
eu-north-1
eu-paris-1
eu-south-1
eu-south-2
eu-stockholm-1
eu-west-1
eu-west-2
eu-west-3
eu-zurich-1
europenorth
europewest
francec
frances
germanyn
germanywc
il-jerusalem-1
indiacentral
indiasouth
indiawest
japaneast
japanwest
koreacentral
koreasouth
me-abudhabi-1
me-central-1
me-dubai-1
me-jeddah-1
me-south-1
mx-queretaro-1
norwaye
norwayw
sa-east-1
sa-santiago-1
sa-saopaulo-1
sa-vinhedo-1
southafrican
southafricaw
switzerlandn
switzerlandw
uaec
uaen
uk-cardiff-1
uk-london-1
uknorth
uksouth
uksouth2
ukwest
us-ashburn-1
us-east-1
us-east-2
us-gov-east-1
us-gov-west-1
us-phoenix-1
us-sanjose-1
us-west-1
us-west-2
uscentral
uscentraleuap
useast
useast2
useast2euap
usnorth
ussouth
uswest
uswest2
uswestcentral
Acceptable expressions for the country_name and country facets
See this table for values that you can query for with the country_names and country codes.
Example: country_name:'Germany' or country:'DE'
|
country_name |
country |
|
Afghanistan |
AF |
|
Åland Islands |
AX |
|
Albania |
AL |
|
Algeria |
DZ |
|
American Samoa |
AS |
|
Andorra |
AD |
|
Angola |
AO |
|
Anguilla |
AI |
|
Antarctica |
AQ |
|
Antigua and Barbuda |
AG |
|
Argentina |
AR |
|
Armenia |
AM |
|
Aruba |
AW |
|
Australia |
AU |
|
Austria |
AT |
|
Azerbaijan |
AZ |
|
Bahamas |
BS |
|
Bahrain |
BH |
|
Bangladesh |
BD |
|
Barbados |
BB |
|
Belarus |
BY |
|
Belgium |
BE |
|
Belize |
BZ |
|
Benin |
BJ |
|
Bermuda |
BM |
|
Bhutan |
BT |
|
Bolivia (Plurinational State of) |
BO |
|
Bonaire, Sint Eustatius and Saba |
BQ |
|
Bosnia and Herzegovina |
BA |
|
Botswana |
BW |
|
Bouvet Island |
BV |
|
Brazil |
BR |
|
British Indian Ocean Territory |
IO |
|
Brunei Darussalam |
BN |
|
Bulgaria |
BG |
|
Burkina Faso |
BF |
|
Burundi |
BI |
|
Cabo Verde |
CV |
|
Cambodia |
KH |
|
Cameroon |
CM |
|
Canada |
CA |
|
Cayman Islands |
KY |
|
Central African Republic |
CF |
|
Chad |
TD |
|
Chile |
CL |
|
China |
CN |
|
Christmas Island |
CX |
|
Cocos (Keeling) Islands |
CC |
|
Colombia |
CO |
|
Comoros |
KM |
|
Congo |
CG |
|
Congo, Democratic Republic of the |
CD |
|
Cook Islands |
CK |
|
Costa Rica |
CR |
|
Côte d'Ivoire |
CI |
|
Croatia |
HR |
|
Cuba |
CU |
|
Curaçao |
CW |
|
Cyprus |
CY |
|
Czechia |
CZ |
|
Denmark |
DK |
|
Djibouti |
DJ |
|
Dominica |
DM |
|
Dominican Republic |
DO |
|
Ecuador |
EC |
|
Egypt |
EG |
|
El Salvador |
SV |
|
Equatorial Guinea |
GQ |
|
Eritrea |
ER |
|
Estonia |
EE |
|
Eswatini |
SZ |
|
Ethiopia |
ET |
|
Falkland Islands (Malvinas) |
FK |
|
Faroe Islands |
FO |
|
Fiji |
FJ |
|
Finland |
FI |
|
France |
FR |
|
French Guiana |
GF |
|
French Polynesia |
PF |
|
French Southern Territories |
TF |
|
Gabon |
GA |
|
Gambia |
GM |
|
Georgia |
GE |
|
Germany |
DE |
|
Ghana |
GH |
|
Gibraltar |
GI |
|
Greece |
GR |
|
Greenland |
GL |
|
Grenada |
GD |
|
Guadeloupe |
GP |
|
Guam |
GU |
|
Guatemala |
GT |
|
Guernsey |
GG |
|
Guinea |
GN |
|
Guinea-Bissau |
GW |
|
Guyana |
GY |
|
Haiti |
HT |
|
Heard Island and McDonald Islands |
HM |
|
Holy See |
VA |
|
Honduras |
HN |
|
Hong Kong |
HK |
|
Hungary |
HU |
|
Iceland |
IS |
|
India |
IN |
|
Indonesia |
ID |
|
Iran (Islamic Republic of) |
IR |
|
Iraq |
IQ |
|
Ireland |
IE |
|
Isle of Man |
IM |
|
Israel |
IL |
|
Italy |
IT |
|
Jamaica |
JM |
|
Japan |
JP |
|
Jersey |
JE |
|
Jordan |
JO |
|
Kazakhstan |
KZ |
|
Kenya |
KE |
|
Kiribati |
KI |
|
Korea (Democratic People's Republic of) |
KP |
|
Korea, Republic of |
KR |
|
Kuwait |
KW |
|
Kyrgyzstan |
KG |
|
Lao People's Democratic Republic |
LA |
|
Latvia |
LV |
|
Lebanon |
LB |
|
Lesotho |
LS |
|
Liberia |
LR |
|
Libya |
LY |
|
Liechtenstein |
LI |
|
Lithuania |
LT |
|
Luxembourg |
LU |
|
Macao |
MO |
|
Madagascar |
MG |
|
Malawi |
MW |
|
Malaysia |
MY |
|
Maldives |
MV |
|
Mali |
ML |
|
Malta |
MT |
|
Marshall Islands |
MH |
|
Martinique |
MQ |
|
Mauritania |
MR |
|
Mauritius |
MU |
|
Mayotte |
YT |
|
Mexico |
MX |
|
Micronesia (Federated States of) |
FM |
|
Moldova, Republic of |
MD |
|
Monaco |
MC |
|
Mongolia |
MN |
|
Montenegro |
ME |
|
Montserrat |
MS |
|
Morocco |
MA |
|
Mozambique |
MZ |
|
Myanmar |
MM |
|
Namibia |
NA |
|
Nauru |
NR |
|
Nepal |
NP |
|
Netherlands |
NL |
|
New Caledonia |
NC |
|
New Zealand |
NZ |
|
Nicaragua |
NI |
|
Niger |
NE |
|
Nigeria |
NG |
|
Niue |
NU |
|
Norfolk Island |
NF |
|
North Macedonia |
MK |
|
Northern Mariana Islands |
MP |
|
Norway |
NO |
|
Oman |
OM |
|
Pakistan |
PK |
|
Palau |
PW |
|
Palestine, State of |
PS |
|
Panama |
PA |
|
Papua New Guinea |
PG |
|
Paraguay |
PY |
|
Peru |
PE |
|
Philippines |
PH |
|
Pitcairn |
PN |
|
Poland |
PL |
|
Portugal |
PT |
|
Puerto Rico |
PR |
|
Qatar |
QA |
|
Réunion |
RE |
|
Romania |
RO |
|
Russian Federation |
RU |
|
Rwanda |
RW |
|
Saint Barthélemy |
BL |
|
Saint Helena, Ascension and Tristan da Cunha |
SH |
|
Saint Kitts and Nevis |
KN |
|
Saint Lucia |
LC |
|
Saint Martin (French part) |
MF |
|
Saint Pierre and Miquelon |
PM |
|
Saint Vincent and the Grenadines |
VC |
|
Samoa |
WS |
|
San Marino |
SM |
|
Sao Tome and Principe |
ST |
|
Saudi Arabia |
SA |
|
Senegal |
SN |
|
Serbia |
RS |
|
Seychelles |
SC |
|
Sierra Leone |
SL |
|
Singapore |
SG |
|
Sint Maarten (Dutch part) |
SX |
|
Slovakia |
SK |
|
Slovenia |
SI |
|
Solomon Islands |
SB |
|
Somalia |
SO |
|
South Africa |
ZA |
|
South Georgia and the South Sandwich Islands |
GS |
|
South Sudan |
SS |
|
Spain |
ES |
|
Sri Lanka |
LK |
|
Sudan |
SD |
|
Suriname |
SR |
|
Svalbard and Jan Mayen |
SJ |
|
Sweden |
SE |
|
Switzerland |
CH |
|
Syrian Arab Republic |
SY |
|
Taiwan, Province of China |
TW |
|
Tajikistan |
TJ |
|
Tanzania, United Republic of |
TZ |
|
Thailand |
TH |
|
Timor-Leste |
TL |
|
Togo |
TG |
|
Tokelau |
TK |
|
Tonga |
TO |
|
Trinidad and Tobago |
TT |
|
Tunisia |
TN |
|
Turkey |
TR |
|
Turkmenistan |
TM |
|
Turks and Caicos Islands |
TC |
|
Tuvalu |
TV |
|
Uganda |
UG |
|
Ukraine |
UA |
|
United Arab Emirates |
AE |
|
United Kingdom of Great Britain and Northern Ireland |
GB |
|
United States of America |
US |
|
United States Minor Outlying Islands |
UM |
|
Uruguay |
UY |
|
Uzbekistan |
UZ |
|
Vanuatu |
VU |
|
Venezuela (Bolivarian Republic of) |
VE |
|
Viet Nam |
VN |
|
Virgin Islands (British) |
VG |
|
Virgin Islands (U.S.) |
VI |
|
Wallis and Futuna |
WF |
|
Western Sahara |
EH |
|
Yemen |
YE |
|
Zambia |
ZM |
|
Zimbabwe |
ZW |
Acceptable expressions for encryption algorithms
See this list for values that you can query for with the ssl_signature_algorithm facet:
RSA-MD4
RSA-MD5
RSA-RIPEMD160
RSA-SHA1
RSA-SHA1-2
RSA-SHA224
RSA-SHA256
RSA-SHA3-224
RSA-SHA3-256
RSA-SHA3-384
RSA-SHA3-512
RSA-SHA384
RSA-SHA512
RSA-SHA512/224
RSA-SHA512/256
BLAKE2b512
BLAKE2s256
id-rsassa-pkcs1-v1_5-with-sha3-224
id-rsassa-pkcs1-v1_5-with-sha3-256
id-rsassa-pkcs1-v1_5-with-sha3-384
id-rsassa-pkcs1-v1_5-with-sha3-512
md4WithRSAEncryption
MD5
MD5-SHA1
md5WithRSAEncryption
ripemd
RIPEMD160
ripemd160WithRSA
rmd160
SHA1
sha1WithRSAEncryption
SHA224
sha224WithRSAEncryption
SHA256
sha256WithRSAEncryption
SHA3-224
SHA3-256
SHA3-384
SHA3-512
SHA384
sha384WithRSAEncryption
SHA512
SHA512-224
sha512-224WithRSAEncryption
SHA512-256
sha512-256WithRSAEncryption
sha512WithRSAEncryption
SHAKE128
SHAKE256
SM3
sm3WithRSAEncryption
ssl3-md5
ssl3-sha1
Acceptable expressions for discovered libraries
See the readme section in the Library-Detector-for-Chrome GitHub repository.
Acceptable expressions for port numbers, services, CPEs, CVEs, and city names
See the following lists for items that you can query for. The list is current as of August 2022: