Case Sensitivity in ThreatStream Search

Syntax Rules Example
<keyword>

Keywords are not case sensitive. Results are returned regardless of case.

healthcare

or

Healthcare

field = <value>

Field names are case sensitive and must be must be entered exactly as they appear in the Intelligence Fields in ThreatStream.

Values for fields are not case sensitive.

status=active

Status=active

field ~ <regex>

All letters in regular expressions must be lowercase.

Though the regular expression can only contain lowercase letters, search results are returned regardless of case.
tags~".+(phishing|exploit).+"

tags~".+(Phishing|Exploit).+"