We use cookies to improve your experience. Do you accept?

Flex Your Threat Response Queries with Cyware Query Language (CQL)

Flex Your Threat Response Queries with Cyware Query Language (CQL) - Featured Image

CFTR • Sep 27, 2022

When it comes to managing a large number of threat data, security analysts have a lot on their plate. It is a cumbersome task to find relevant data just by using the standard search and filter options. In the latest release of our fusion and threat response platform, CFTR v3.1, we have introduced Cyware Query Language (CQL) that allows security analysts to write simple queries to fetch appropriate data and save lots of time and effort. It is important to note that the CQL support already exists in Cyware’s threat intelligence platform, CTIX, and now has been extended to CFTR.

Why Cyware Query Language (CQL)?

Using CQL, security analysts can now build powerful and structured queries with sophisticated logic to retrieve relevant data from module listing pages. Let’s learn about the other capabilities that CQL offers in CFTR v3.1.

  • Flexible querying: Akin to other structured query languages, CQL provides a syntax for security analysts to request queries textually but with more flexible and extensive querying capabilities such as searching for keywords or keyword exceptions. Also, CQL helps in exporting and reporting in a more flexible way by providing the relevant data

  • Advanced filtering: CFTR is equipped with a wide range of advanced filters that can be used to narrow down any given query. Within a few clicks, security analysts can seek answers to their queries with the help of the in-built filters. CQL is capable of fetching greater than, less than, and equal numeric values and dates.

  • Use of multiple conditions: Security analysts can add multiple conditions together to create queries, filtering out the noise or exploring data more deeply. That’s where CQL provides assistance.

Making a Security Analyst’s Life Easier

CQL helps solve the different challenges that security analysts face in their day-to-day data filtering operations and helps reduce their workload in different ways.

  • Reuse CQL Queries: Once analysts build a CQL query to fetch information, they can save those queries for future references and reuse them later without building them again. Furthermore, the saved search can be used to create and share reports with key stakeholders, helping them make better decisions.

  • Reduced Response Time: CQL comes with advanced filtering options that allow security analysts to accelerate their investigations and reduce the mean time to respond (MTTR) to threats. For example, security teams can quickly retrieve the high-priority IP Spoofing incidents that are in the open state.

Get Your Queries Answered Now!

Cyware amplifies security teams’ potential and increases their efficiency and productivity by giving them the flexibility to search data better with CQL. With CQL, Cyware empowers security teams with powerful search and the flexibility to query across their automated threat response platform (CFTR), enabling them to conduct quick responses.

Book a free demo to learn how you can get your queries answered via CQL.

Related Blogs

Orchestration for Secure Development Lifecycle Management - Featured Image

Orchestration for Secure Development Lifecycle Management

With the increasing adoption of Software-as-a-Service (SaaS) products, it is imperative for enterprises to move beyond a cookie-cutter approach to cybersecurit

Use CaseSoftware Development LifecycleMonitoringCode Security
Notification SLAs: MSSPs Can Now Share New Incident Alerts With Their Clients - Featured Image

Notification SLAs: MSSPs Can Now Share New Incident Alerts With Their Clients

The shorter the wait between the occurrence of an incident and its response, the better. Cyware understands that time taken to respond to an incident is a criti

Use CaseCyber IncidentsNotification SLAManaged Security Service Providers (MSSPs)
Streamlining MITRE CAR Operationalization with Security Orchestration - Featured Image

Streamlining MITRE CAR Operationalization with Security Orchestration

While threat actors are successfully making sophisticated intrusions with advanced attack vectors, security teams need to be quick on the uptake and take a proa

Use CaseSecurity OrchestrationMITRE Car
Orchestrated Attack and Defense Simulation: Automatically Testing Defense Effectiveness - Featured Image

Orchestrated Attack and Defense Simulation: Automatically Testing Defense Effectiveness

The cyber threat landscape is growing in complexity with the increase in overall attack surface of organizations. To counteract this growing attack complexity,

Use CaseAttack simulation orchestrationOrchestrated attack simulationAttack Simulations
Build Custom Threat Response Case Management Workflows with Cyware - Featured Image

Build Custom Threat Response Case Management Workflows with Cyware

Every security team has unique security requirements that drive their threat response workflows. We provide every such team the flexibility to build their own c

Use CaseMean-Time-to-Respond (MTTR)Threat VisibilityCyber Fusion
Don’t Miss Any Critical Task in Incident Response! Auto-Create Actions Now. - Featured Image

Don’t Miss Any Critical Task in Incident Response! Auto-Create Actions Now.

When an incident occurs, security teams create and define actions manually, which increases their [mean time to respond (MTTR)](https://cyware.com/educational-g

Cyware Fusion and Threat Response (CFTR)CFTRUse CaseAction library
Drive Automated Threat Response Strategy with Cyware's New Rule Engine - Featured Image

Drive Automated Threat Response Strategy with Cyware's New Rule Engine

Incident response teams spend a significant amount of their time performing routine tasks that delays threat response. In [CFTR](https://cyware.com/cyware-fusio

Use CaseRule EngineAutomationCyber Fusion
Cyware’s New Multi-Tenancy Dashboard Enables MSSPs to Gain Threat Visibility Across Customer Environments - Featured Image

Cyware’s New Multi-Tenancy Dashboard Enables MSSPs to Gain Threat Visibility Across Customer Environments

[Managed security service providers (MSSPs)](https://cyware.com/cyware-managed-security-service-providers-mssps) must have capabilities to support multiple tena

Use CaseIncident ManagementMSSP dashboardMSSP
Information Sharing for Incident Response Teams is Now Easy with Cyware’s Slack Integration - Featured Image

Information Sharing for Incident Response Teams is Now Easy with Cyware’s Slack Integration

With more security teams working remotely than ever before, team collaboration and communication often become patchy. In our latest release, we have integ

Slack IntegrationCyware Fusion and Threat Response (CFTR)CFTRUse Case
Connect the Dots with Cyware For a Faster Threat Investigation Process - Featured Image

Connect the Dots with Cyware For a Faster Threat Investigation Process

Threat investigation requires unearthing of complex hidden patterns, more so importantly in present times when threat actors have become highly advanced and are

Cyware Fusion and Threat Response (CFTR)Threat InvestigationUse Caseconnect the dots
Discover a Smarter Way to Synchronize Data with Cyber Fusion Center - Featured Image

Discover a Smarter Way to Synchronize Data with Cyber Fusion Center

Security teams work through processes of several inter-connected workflows for threat detection, analysis, and response that requires continuous data collection

Use CaseData SyncCyware OrchestrateCyber Fusion
Gain 360-Degree Insights into Threat Data with Cyware’s Revamped Threat Data Capabilities - Featured Image

Gain 360-Degree Insights into Threat Data with Cyware’s Revamped Threat Data Capabilities

If security teams fail to gain the required context from the ingested threat data for predicting and preempting threats, then such threat data is meaningless. W

Use CaseThreat DataCyware Threat Intelligence Exchange (CTIX)