InstaQuery API

The InstaQuery API allows users to search for system artifacts that Aurora Focus stores locally, such as files, registry key persistence points, processes, and more. Users can search for possible threats, investigate incidents, and take remediation actions.

Note:

InstaQuery searches are zone-based. Unzoned endpoints cannot be searched using InstaQuery.