Detection Rules' Key Words Searching

You can use symbols or keywords in your search to make your search results more precise.

  -  Use AND to narrow your search. E.g., sms AND address.
  -  Use OR to combine your search. E.g., sms OR location.
  -  Use "<json key>:" to search for specific rule data. E.g., label:camera or api1.method:takePicture.
  -  Use AND, OR, "<json key>:" together. E.g., api1.method:open AND api2.method:takePicture.

Here are the json keys in Quark Rule:
You can select a label to view related rules.