{"data":{"entities":{"widgets":{"4e1f41e7-2dfb-4b93-8076-6c2570f44f74":{"kind":"popup","cta":"WHO USES IT?","audio_url":"","options":{"root":{"theme":"light","close_button":false,"prev_button":true,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":450,"secondaryButton":false},"description":{"value":"

Unlimited ingest and retention

The Stairwell platform empowers you to collect every executable file and script, hold them forever, and evolve beyond point-in-time detection by performing continuous, research-grade analysis.

SOCs, incident responders, and intel teams ❤️ Stairwell

Stairwell immediately elevates visibility, reduces time to response, and protects organizations by allowing them to operationalize their own intelligence.

About the tour

This tour will take you through several areas of the Stairwell platform. You can choose where you want to start and go through as many features as you want.

At certain points of the tour, you'll have the ability to browse on your own. You'll only be able to access areas of Stairwell that are included in the tour.

If you have any questions at any point or want to see more, feel free to send us a message. We'll be happy to help!

Welcome to the Stairwell dashboard

The Stairwell dashboard provides a unique look into your environment - like the amount of files recently ingested - and see if there are any artifacts of interest.

From the dashboard, you can see everything that happened in the last 7 or 30 days.

","color":"#1a1348"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1,"title":{"color":"#1a1348"}},"id":"70486605-850a-457d-94e2-29a2b2e252a0","title":"","dom_id":"#Dropdown52-option","page_id":"7d6fb94f-6dab-43ab-88fb-4a1f2f11c743","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ea409212-5555-4d95-938b-d8733300a742"},"b920df2e-1f4b-4f74-bd57-ce6761be3713":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"rc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFFFFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":0,"y":49},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

In the past 7 days, 12 YARA rules were added. Stairwell comes with thousands of rules out-of-the-box to aid in detection.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#9939EB"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"b920df2e-1f4b-4f74-bd57-ce6761be3713","title":"","dom_id":".ms-Stack-inner > :nth-child(4)","page_id":"7d6fb94f-6dab-43ab-88fb-4a1f2f11c743","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ea409212-5555-4d95-938b-d8733300a742"},"82f3189f-5e69-4cfd-87de-4983069931b4":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFFFFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":400,"backdropRect":null,"backdropSelector":null,"offset":{"x":44,"y":74},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

At the same time, approximately 14,700 unique files were ingested & analyzed for this environment, and almost 50,000 overall.

Collected artifacts are retained forever, allowing you to perform retrospective analysis at any time.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#9939EB"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"82f3189f-5e69-4cfd-87de-4983069931b4","title":"","dom_id":".css-112 > .environment-type-chip","page_id":"7d6fb94f-6dab-43ab-88fb-4a1f2f11c743","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ea409212-5555-4d95-938b-d8733300a742"},"8d17eec8-1215-4708-86ef-600d5a6c09dc":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"rc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFFFFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":400,"backdropRect":null,"backdropSelector":null,"offset":{"x":-1,"y":55},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Stairwell is your own private, digital evidence locker for your organization's files.

Additionally, Stairwell provides access to several hundred million file samples via a variety of malware feeds.

It's a great way to see if a file is unique to your environment.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#9939EB"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"8d17eec8-1215-4708-86ef-600d5a6c09dc","title":"","dom_id":".css-190 > .ms-Stack","page_id":"7d6fb94f-6dab-43ab-88fb-4a1f2f11c743","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ea409212-5555-4d95-938b-d8733300a742"},"1034352b-ad00-47d8-8180-e827e283c5d3":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"rc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFFFFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":400,"backdropRect":null,"backdropSelector":null,"offset":{"x":1,"y":55},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Inception performs continuous research-grade analysis for every file collected and flags objects of interest through its Mal-Eval feature.

Mal-Eval is the result of privately run AV verdicts, unpacking, YARA scanning, static & dynamic analysis, and variant discovery.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#9939EB"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"1034352b-ad00-47d8-8180-e827e283c5d3","title":"","dom_id":".ms-Stack-inner > :nth-child(7)","page_id":"7d6fb94f-6dab-43ab-88fb-4a1f2f11c743","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ea409212-5555-4d95-938b-d8733300a742"},"1d30b4d9-5e24-42ef-b4ca-23a67f662670":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFFFFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":98,"y":54},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Finally, any recent YARA matches are surfaced for quick & actionable triage and visibility.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#9939EB"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"1d30b4d9-5e24-42ef-b4ca-23a67f662670","title":"","dom_id":".info-tooltip-container > span","page_id":"7d6fb94f-6dab-43ab-88fb-4a1f2f11c743","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ea409212-5555-4d95-938b-d8733300a742"},"f783b187-5907-4b75-9682-ef59274ea1c7":{"kind":"popup","cta":"NEXT FEATURE","audio_url":"","options":{"root":{"theme":"light","close_button":true,"prev_button":true,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":475,"secondaryButton":true,"offset":{"x":65,"y":87},"alignment":"needCalc","backdropColor":"rgba(0, 0, 0, 0.4)","offsetFromOriginPx":{"x":0,"y":0}},"description":{"value":"

Thanks for exploring the dashboard! 🎉

Click Next Feature to continue the tour, or
Click Contact Team to reach out and learn more!

Ultimate file searching capabilities

The Stairwell platform empowers you to search, hunt, and pivot across all of your files with lighting speed. ⚡️

You can drop a batch of indicators of compromise and instantly sweep your entire environment for matches: hashes, hostnames, and IP addresses.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"c5380a3b-3690-4dac-8c7c-d88b7634671a","title":"","dom_id":"#search-input","page_id":"ff1da6c6-2db3-41d7-949c-76a5393065c5","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2ab3280b-3282-42b1-bae7-5d0d555827ba"},"ef1a868b-97b6-407f-ad2d-3db4bf91b5dd":{"kind":"hotspot","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":92,"y":68},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#FA6219","beaconOpacity":1,"zoom":null},"description":{"value":"

You can also click the configuration icon to reveal the query builder, which allows you to see all the properties you can search against.

Let's click on it now.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"ef1a868b-97b6-407f-ad2d-3db4bf91b5dd","title":"","dom_id":".query-builder-toggle","page_id":"ff1da6c6-2db3-41d7-949c-76a5393065c5","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2ab3280b-3282-42b1-bae7-5d0d555827ba"},"952882f9-c17f-4739-9bbb-4b27976b989b":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"bc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":51,"y":19},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

The query builder allows you to easily construct advanced searches.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"952882f9-c17f-4739-9bbb-4b27976b989b","title":"","dom_id":"#Dialog31-title","page_id":"ac1f4fef-308c-4bbd-813c-9900878f4da9","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2ab3280b-3282-42b1-bae7-5d0d555827ba"},"00d15318-5065-4018-9739-c400ad58be41":{"kind":"hotspot","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"bc","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":49,"y":20},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#FA6219","beaconOpacity":1,"zoom":null},"description":{"value":"

Let's construct a query.

Click on the property name text box to begin building.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"00d15318-5065-4018-9739-c400ad58be41","title":"","dom_id":"#Dropdown46-option","page_id":"ac1f4fef-308c-4bbd-813c-9900878f4da9","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2ab3280b-3282-42b1-bae7-5d0d555827ba"},"3e278768-981a-430d-b20d-10bd6ec17bb9":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"bc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":45,"y":39},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

We've populated our search with asset.count, and we're only interested in files that currently or have existed on fewer than 5 machines.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"3e278768-981a-430d-b20d-10bd6ec17bb9","title":"","dom_id":"#Dropdown46-option","page_id":"0847e531-dd7c-44fc-ba07-f29eb787e783","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2ab3280b-3282-42b1-bae7-5d0d555827ba"},"8dea2a0b-c9f6-4845-a128-7d7b9607ccc7":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":51,"y":73},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

We've also added an additional search property, object.path, as a way of scoping our search down to files that have existed within System32 directories.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"8dea2a0b-c9f6-4845-a128-7d7b9607ccc7","title":"","dom_id":"#Dropdown288-option","page_id":"0847e531-dd7c-44fc-ba07-f29eb787e783","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2ab3280b-3282-42b1-bae7-5d0d555827ba"},"e7f69fb0-ba67-423c-8da3-cdf907bfb6fb":{"kind":"hotspot","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":60,"y":84},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#FA6219","beaconOpacity":1,"zoom":null},"description":{"value":"

Click save to execute the search.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"e7f69fb0-ba67-423c-8da3-cdf907bfb6fb","title":"","dom_id":".ms-Dialog-actionsRight > :nth-child(2) > .ms-Button > .ms-Button-flexContainer","page_id":"0847e531-dd7c-44fc-ba07-f29eb787e783","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2ab3280b-3282-42b1-bae7-5d0d555827ba"},"1f4e6101-c3e3-4197-a6b1-6e0faf7078a3":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":395,"backdropRect":null,"backdropSelector":null,"offset":{"x":34,"y":60},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Within a second, we just hunted across all collected artifacts and immediately unearthed potentially interesting files.

❗️ Note: The Stairwell platform has unlimited retention. The files you see here could have been observed several months ago, only to no longer be sitting on disk. If a file mysteriously deletes itself, you'll always have a record of its existence.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"1f4e6101-c3e3-4197-a6b1-6e0faf7078a3","title":"","dom_id":"#search-input","page_id":"1008f40a-856b-4491-9a19-a114112213e5","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2ab3280b-3282-42b1-bae7-5d0d555827ba"},"53373091-caf9-4d06-9f05-f96b6f7e5010":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":340,"backdropRect":null,"backdropSelector":null,"offset":{"x":48,"y":95},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

We can see a half dozen search results that represent files that are rare across our environment, sitting in System32 directories, and also happen to have AV verdicts and YARA matches.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"53373091-caf9-4d06-9f05-f96b6f7e5010","title":"","dom_id":"#row535-5 > .ms-DetailsRow-fields > .rule-matches","page_id":"1008f40a-856b-4491-9a19-a114112213e5","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2ab3280b-3282-42b1-bae7-5d0d555827ba"},"673480a1-1b51-415f-9309-c24799d1435e":{"kind":"popup","cta":"NEXT FEATURE","audio_url":"","options":{"root":{"theme":"light","close_button":true,"prev_button":true,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":475,"secondaryButton":true,"backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Thanks for exploring the search capabilities! 🎉

Click Next Feature to continue the tour, or
Click Contact Team to reach out and learn more!

Deep file visibility

The Stairwell platform runs an extensive battery of research-grade analysis on every file collected.

We are currently looking at six files that surfaced by searching for low-prevalent files sitting in System32 directories.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"3bf2e292-414b-4718-84b7-f4c028fabe35","title":"","dom_id":"#row174-5 > .ms-DetailsRow-fields > .first-seen","page_id":"5bf05864-6905-47fe-aa4c-3d0cfa93aab8","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"df6ac8a8-0212-4067-bac0-423949c6fd92":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":400,"backdropRect":null,"backdropSelector":null,"offset":{"x":59,"y":69},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Stairwell shows several key properties for each file:

File hash
Number of assets the file was observed on
First seen time and file size
YARA matches
File path and name
Suspicious labels and probability of \"bad\" via Stairwell's Mal-Eval scoring

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"df6ac8a8-0212-4067-bac0-423949c6fd92","title":"","dom_id":"#row174-5 > .ms-DetailsRow-fields > :nth-child(6)","page_id":"5bf05864-6905-47fe-aa4c-3d0cfa93aab8","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"b0b28de4-9372-419a-ad8e-b173d6e02f38":{"kind":"hotspot","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":45,"y":63},"offsetFromOriginPx":{"x":0,"y":0},"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#FA6219","beaconOpacity":1,"zoom":null},"description":{"value":"

Let's dive into the details of a specific file by clicking its hash.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"b0b28de4-9372-419a-ad8e-b173d6e02f38","title":"","dom_id":"a[href=\"https://app.stairwell.com/search?object-matches-query=asset.count+%3C+5+%26%26+object.path.contains%28r%22System32%22%29&half-panel-type=object&half-panel-value=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"] > :nth-child(1) > .ms-Stack > :nth-child(2)","page_id":"5bf05864-6905-47fe-aa4c-3d0cfa93aab8","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"f96ea11b-9c17-47ae-813d-62347198deb0":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":318,"backdropRect":null,"backdropSelector":null,"offset":{"x":81,"y":91},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)","auto_hide_text":true},"description":{"value":"

Stairwell provides a wealth of data about every object. Information is organized into a number of useful tabs.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"f96ea11b-9c17-47ae-813d-62347198deb0","title":"","dom_id":"#Pivot565-Tab2 > .ms-Button-flexContainer > .info-tooltip-container > .ms-Pivot-linkContent > .ms-Pivot-text","page_id":"08e303a6-4ec2-431b-a05d-b1a19e290097","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"6ecbce18-a332-483f-b052-40c1032c3514":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":60,"y":69},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

File size and type, in addition to a number of hashes are provided - to include fuzzy matching hashes that you can easily pivot on (imphash, TLSH, etc.)

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"6ecbce18-a332-483f-b052-40c1032c3514","title":"","dom_id":":nth-child(7) > .val > .base-pill-container > :nth-child(1) > .ms-Stack","page_id":"08e303a6-4ec2-431b-a05d-b1a19e290097","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"a4735cbd-3dbe-4134-8cc0-e8e39b79f99d":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":270,"backdropRect":null,"backdropSelector":null,"offset":{"x":71,"y":53},"offsetFromOriginPx":{"x":-60,"y":4},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

You can see when the file was first seen in your organization as well as across Stairwell, which is great for answering, \"Is this file truly unique to my environment?\"

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"a4735cbd-3dbe-4134-8cc0-e8e39b79f99d","title":"","dom_id":":nth-child(2) > .labeled-value-table > tbody > :nth-child(1) > .val","page_id":"08e303a6-4ec2-431b-a05d-b1a19e290097","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"e8377b48-14b6-4e05-a2e4-745282a58fd0":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":74,"y":43},"offsetFromOriginPx":{"x":0,"y":-2},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

You can also see the Mal-Eval verdict on the file, to include a probability of \"bad\", in addition to YARA rules that match this file.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"e8377b48-14b6-4e05-a2e4-745282a58fd0","title":"","dom_id":".matches-container > .sticky-header","page_id":"08e303a6-4ec2-431b-a05d-b1a19e290097","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"4125c97f-c303-4d72-bf0a-14d861ecb63d":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"rc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":14,"y":51},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Hostnames and IPs are also extracted from each file, providing you with even more context.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"4125c97f-c303-4d72-bf0a-14d861ecb63d","title":"","dom_id":".filterable-hostnames > .sticky-header > h3","page_id":"08e303a6-4ec2-431b-a05d-b1a19e290097","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"d328e412-3f70-4996-ab18-971c49b1fab0":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"rc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":2,"y":84},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Signing status and certificate data is provided.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"d328e412-3f70-4996-ab18-971c49b1fab0","title":"","dom_id":":nth-child(6) > .ms-Stack","page_id":"08e303a6-4ec2-431b-a05d-b1a19e290097","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"64832808-c934-45b6-b5ff-024ad37f0f9a":{"kind":"hotspot","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":50,"y":55},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#ff8000","beaconOpacity":1,"zoom":null},"description":{"value":"

Click the Sightings tab

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"64832808-c934-45b6-b5ff-024ad37f0f9a","title":"","dom_id":"#Pivot565-Tab1 > .ms-Button-flexContainer > .ms-Pivot-linkContent > .ms-Pivot-text","page_id":"08e303a6-4ec2-431b-a05d-b1a19e290097","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"61b6448f-fdc2-4560-b939-1c282a39d557":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":26,"y":79},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

You'll be able to see where the file existed in your environment at any point in time, even if it is no longer there.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"61b6448f-fdc2-4560-b939-1c282a39d557","title":"","dom_id":"#row398-1 > .ms-DetailsRow-fields > :nth-child(3)","page_id":"eeb6f0f9-4579-48d6-8b99-02cc5e35eac8","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"8010e630-f693-4e97-95d8-659989997261"},"19b4509e-e8ae-4823-91db-2f9e33bc7540":{"kind":"popup","cta":"NEXT FEATURE","audio_url":"","options":{"root":{"theme":"light","close_button":true,"prev_button":true,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":475,"secondaryButton":true,"offset":{"x":88,"y":50},"alignment":"needCalc","backdropColor":"rgba(0, 0, 0, 0.4)","offsetFromOriginPx":{"x":0,"y":0}},"description":{"value":"

Thanks for exploring file details! 🎉

Click Next Feature to continue the tour, or
Click Contact Team to reach out and learn more!

Unleash the power of variant discovery

With Stairwell, you'll be able to perform an organization-wide and global threat hunt for variants in a matter of seconds.

For any file of interest, simply click the Variant Discovery tab

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"80c0abd4-a412-4ddb-9cc8-0cb2141bbea0","title":"","dom_id":"#Pivot254-Tab2 > .ms-Button-flexContainer > .info-tooltip-container > .ms-Pivot-linkContent > .ms-Pivot-text","page_id":"eeb6f0f9-4579-48d6-8b99-02cc5e35eac8","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb"},"61db1843-e189-43e0-8af3-a02c9d2a7a53":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":49,"y":69},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

In a matter of seconds, 3 objects were found within the sample environment.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"61db1843-e189-43e0-8af3-a02c9d2a7a53","title":"","dom_id":".selected","page_id":"ddbe537e-2c8e-485c-83d8-5c11657b93c0","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb"},"75d66059-a2e0-4a86-96ec-24e980302260":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":78,"y":47},"offsetFromOriginPx":{"x":30,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

... and a couple dozen variants were found globally.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"75d66059-a2e0-4a86-96ec-24e980302260","title":"","dom_id":".button-container > .ms-Stack > :nth-child(2)","page_id":"ddbe537e-2c8e-485c-83d8-5c11657b93c0","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb"},"ae6b22bd-6937-483b-9825-015563f7506d":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":50,"y":99},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

We can see which assets the original file was observed on and when. We can also uncover other assets that had variants of the initial file.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"ae6b22bd-6937-483b-9825-015563f7506d","title":"","dom_id":".timeline-container","page_id":"ddbe537e-2c8e-485c-83d8-5c11657b93c0","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb"},"d8517826-9ba2-4f6f-88b9-8964b0116a4c":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"bc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":50,"y":4},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Information about the original file is shown at the top. It includes assets the file was found on, file locations, and first and last seen times.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"d8517826-9ba2-4f6f-88b9-8964b0116a4c","title":"","dom_id":".variant-0","page_id":"ddbe537e-2c8e-485c-83d8-5c11657b93c0","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb"},"41cf0e3a-a516-40ad-95ab-d559938fb8e7":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"bc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":50,"y":3},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Below, you'll see rich details for any discovered variants. Stairwell calculates a percentage match to help with confidence.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"41cf0e3a-a516-40ad-95ab-d559938fb8e7","title":"","dom_id":".variant-1","page_id":"ddbe537e-2c8e-485c-83d8-5c11657b93c0","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb"},"98be5c9a-0b55-416e-89dd-89f69fbcb1a0":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"bc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":51,"y":17},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

You can see these variants of our initial file that were observed on different machines at different times.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"98be5c9a-0b55-416e-89dd-89f69fbcb1a0","title":"","dom_id":"#header5953-asset","page_id":"ddbe537e-2c8e-485c-83d8-5c11657b93c0","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb"},"c4864d3c-a7b6-43d8-a571-ee7ca585f7d5":{"kind":"popup","cta":"NEXT","audio_url":"","options":{"root":{"theme":"light","close_button":false,"prev_button":false,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":475,"secondaryButton":false,"offset":{"x":94,"y":75},"alignment":"needCalc","backdropColor":"rgba(0, 0, 0, 0.4)","offsetFromOriginPx":{"x":0,"y":0}},"description":{"value":"

Leverage variant discovery against your existing alerts

Variant discovery can be invoked programmatically, and many teams leverage the Stairwell API (via tools like their SOAR) to auto-enrich all of their existing alerts.

This lets them automatically perform variant discovery to find permutations on known suspicious files across their environment.

Thanks for exploring variant discovery! 🎉

Click Next Feature to continue the tour, or
Click Contact Team to reach out and learn more!

"},"cta":{"bold":true,"fontSize":16,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"center","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":"","extUrl":null,"extUrlBlank":true},"secondary":{"value":"CONTACT TEAM","bold":true,"fontSize":16,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"center","backgroundColor":{"alpha":100,"hex":"#002B41"},"borderColor":"","extUrl":"https://stairwell.com/contact/?utm_medium=Website&utm_source=Freemium&utm_campaign=2023-01-GLOB-Demand-Website-Freemium-Inception_Tour","extUrlBlank":true},"js":{"value":""},"version":1},"id":"7f36e302-478e-49d3-a2bc-1ceddd3fdf36","title":"","dom_id":"#header517-path","page_id":"ddbe537e-2c8e-485c-83d8-5c11657b93c0","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb"},"4583930b-fe3e-47b2-a2c6-42f3b4c014cf":{"kind":"popup","cta":"SHOW ME SOME YARA","audio_url":"","options":{"root":{"theme":"light","close_button":false,"prev_button":false,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":475,"secondaryButton":false,"backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Unlock YARA at scale

Stairwell comes with thousands of YARA rules for you to use, and new ones are constantly added by the Stairwell Research team.

On top of that, you can author your own YARA rules right inside the Stairwell platform.

We also don't just run YARA once. Stairwell will retroactively scan all previously collected objects and new ones coming into your environment, helping you always stay up to date.

YARA rules are organized into \"Your Rules\" and the rules that \"Stairwell\" provides -- thousands come out-of-the-box.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"a0a1124e-ad36-46bf-bf51-858e2dec7987","title":"","dom_id":".title","page_id":"6d884c41-9ea0-40d7-8237-f57c223cb0fe","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd"},"5568bfd8-2c5b-475e-a95f-7f634a9ff087":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"rc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":9,"y":69},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

You'll also see how many objects matches there are within your private file lake, in addition to matches on malware feed objects that are consumed.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"5568bfd8-2c5b-475e-a95f-7f634a9ff087","title":"","dom_id":"#header59-my_objects-name","page_id":"6d884c41-9ea0-40d7-8237-f57c223cb0fe","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd"},"23150c28-14f2-4bea-95a1-a14bc11fd380":{"kind":"hotspot","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":40,"y":61},"offsetFromOriginPx":{"x":15,"y":15},"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#FA6219","beaconOpacity":1,"zoom":null},"description":{"value":"

Let's see how you can write a new rule. Click on the new rule button.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"23150c28-14f2-4bea-95a1-a14bc11fd380","title":"","dom_id":".ms-Button-flexContainer > .ms-Stack > span","page_id":"6d884c41-9ea0-40d7-8237-f57c223cb0fe","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd"},"60012e0d-f2b2-4ce2-967f-16806ee1639d":{"kind":"popup","cta":"NEXT","audio_url":"","options":{"root":{"theme":"light","close_button":false,"prev_button":true,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":475,"secondaryButton":false,"backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

Built-in editor

Stairwell comes with an editor that you can leverage to write and test your own YARA rules.

An example rule is provided to empower you to quickly begin authoring your own YARA.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"6bd34657-4698-42d1-9fb8-9cc8fdd56865","title":"","dom_id":".view-lines > :nth-child(4)","page_id":"7393590f-bb5d-495f-bc1d-e8959a662ba1","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd"},"1e72ca24-a4d8-4b56-a6fe-b24bd22f1852":{"kind":"hotspot","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"bc","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":48,"y":-11},"offsetFromOriginPx":{"x":1,"y":-11},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#FA6219","beaconOpacity":1,"zoom":null},"description":{"value":"

After writing your rule, you'll want to test it to make sure it works the way you need it to. Click on Test Scan now.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"1e72ca24-a4d8-4b56-a6fe-b24bd22f1852","title":"","dom_id":"#id__842","page_id":"7393590f-bb5d-495f-bc1d-e8959a662ba1","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd"},"dbe55f43-b44e-40d0-83f8-e03792467b53":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":28,"y":58},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

You can provide hashes that should match your rules as quick way to test.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"dbe55f43-b44e-40d0-83f8-e03792467b53","title":"","dom_id":".must-match > .test-scan-subheader","page_id":"d8f4ed4c-d9b2-4034-bcf5-78af949ca1cf","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd"},"afb84364-e85b-4ba6-8ee5-b85a35587288":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":27,"y":58},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

You can also provide hashes that should not match your rules.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"afb84364-e85b-4ba6-8ee5-b85a35587288","title":"","dom_id":".must-not-match > .test-scan-subheader","page_id":"d8f4ed4c-d9b2-4034-bcf5-78af949ca1cf","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd"},"5ec409d8-19be-4668-9b2e-642a712f29e7":{"kind":"tooltip","cta":"NEXT","audio_url":"","options":{"root":{"alignment":"bc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#fff","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":33,"y":10},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null,"beaconColor":"#FA6219","backdropColor":"rgba(0, 0, 0, 0.4)"},"description":{"value":"

After completing a test scan, you can then click the Create button to save your rule, kicking off a scan of all existing files.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"5ec409d8-19be-4668-9b2e-642a712f29e7","title":"","dom_id":":nth-child(2) > .ms-Stack > .ms-Button--primary > .ms-Button-flexContainer","page_id":"d8f4ed4c-d9b2-4034-bcf5-78af949ca1cf","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd"},"4cc9b5b4-da21-46be-8497-810f00d5fb94":{"kind":"popup","cta":"NEXT FEATURE","audio_url":"","options":{"root":{"theme":"light","close_button":true,"prev_button":true,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":475,"secondaryButton":true,"offset":{"x":3,"y":32},"alignment":"needCalc","backdropColor":"rgba(0, 0, 0, 0.4)","offsetFromOriginPx":{"x":0,"y":0}},"description":{"value":"

Thanks for exploring YARA! 🎉

Click Next Feature to continue the tour, or
Click Contact Team to reach out and learn more.

Threat Reports

The Stairwell platform automatically ingests a wealth of threat intelligence and supercharges your ability not only to answer, \"Am I exposed?\" but also to answer, \"Have I ever been exposed?\" and \"Am I exposed to any unknown but similar indicators/TTPs?\"

Stairwell consumes reports from a variety of sources, in addition to providing you the ability to ingest your own feeds & intelligence.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"dd0ca1d2-d495-4ac1-8b82-a431a765661b","title":"","dom_id":".threat-reports-header-text","page_id":"ce2fd8ac-919e-48c3-a89c-ecf112ac91ee","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2c57ea62-32a4-4545-a987-2f065dc5b914"},"d21ba9da-ee89-472a-9dd4-1fe2ff22374d":{"kind":"hotspot","cta":"Next","audio_url":"","options":{"root":{"alignment":"tl","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":56,"y":81},"offsetFromOriginPx":{"x":-1,"y":15},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#FA6219","beaconOpacity":1,"zoom":null},"description":{"value":"

Let's filter the reports.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"d21ba9da-ee89-472a-9dd4-1fe2ff22374d","title":"","dom_id":".filter-pane-toggle > .ms-Button > .ms-Button-flexContainer > .ms-Icon","page_id":"ce2fd8ac-919e-48c3-a89c-ecf112ac91ee","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2c57ea62-32a4-4545-a987-2f065dc5b914"},"b0e66d9c-f9ad-4cbc-a0fb-0d41bbc39537":{"kind":"tooltip","cta":"Next","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":98,"y":20},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null},"description":{"value":"

Filtering allows you to quickly down-select into various report sources, in addition to filtering on reports that have positive matches.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"b0e66d9c-f9ad-4cbc-a0fb-0d41bbc39537","title":"","dom_id":".content","page_id":"5d23b68a-0a49-46bb-b69f-d4365ce27bdc","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2c57ea62-32a4-4545-a987-2f065dc5b914"},"9b44cb2e-a507-4419-94fc-25c34e615351":{"kind":"hotspot","cta":"Next","audio_url":"","options":{"root":{"alignment":"tc","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":27,"y":52},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#FA6219","beaconOpacity":1,"zoom":null},"description":{"value":"

Let's take a deeper look at this Mandiant report outlining attributes of 3CX.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"9b44cb2e-a507-4419-94fc-25c34e615351","title":"","dom_id":":nth-child(1) > :nth-child(2) > .shimmer > :nth-child(1) > .ms-Stack > .report-summary-body > .report-name","page_id":"5d23b68a-0a49-46bb-b69f-d4365ce27bdc","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2c57ea62-32a4-4545-a987-2f065dc5b914"},"8183515b-30cb-4458-ae5f-ccffd1ff9640":{"kind":"popup","cta":"Next","audio_url":"","options":{"root":{"theme":"light","close_button":false,"prev_button":true,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":475,"secondaryButton":false},"description":{"value":"

Report Details

The Stairwell platform automatically ingests, dissects and searches all known indicators -- in addition to extracting YARA that may be present within ingested reports.

Positive matches are listed on the top in red. In this example, we have a match on one of the hashes. We could simply click this hash to pivot into the file details.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"3ad06e75-ede1-4d03-8422-4ab8f030d753","title":"","dom_id":"a[href=\"https://app.stairwell.com/?open-report=2sx76zMu&full-panel-type=object&full-panel-value=74bc2d0b6680faa1a5a76b27e5479cbc\"] > :nth-child(1) > .ms-Stack > .last6","page_id":"3cf3eb43-975e-4240-b0ce-cfd2ec244211","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2c57ea62-32a4-4545-a987-2f065dc5b914"},"237970ff-1f0b-48b2-9fa3-99d3f3a80b82":{"kind":"tooltip","cta":"Next","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":95,"y":58},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null},"description":{"value":"

In addition to performing simple searching against known indicators, Stairwell operationalizes tactical intelligence and performs a number of enrichments.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"237970ff-1f0b-48b2-9fa3-99d3f3a80b82","title":"","dom_id":"#Pivot341-Tab1","page_id":"3cf3eb43-975e-4240-b0ce-cfd2ec244211","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2c57ea62-32a4-4545-a987-2f065dc5b914"},"60ddb9e5-f392-4a25-9a12-a9df68de8e83":{"kind":"hotspot","cta":"Next","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":false,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":230,"backdropRect":null,"backdropSelector":null,"offset":{"x":75,"y":47},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"auto_hide_text":true,"beaconColor":"#FA6219","beaconOpacity":1,"zoom":null},"description":{"value":"

Click the Enrichment IOCs tab.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"60ddb9e5-f392-4a25-9a12-a9df68de8e83","title":"","dom_id":"#Pivot341-Tab1 > .ms-Button-flexContainer > .ms-Pivot-linkContent > .ms-Pivot-text","page_id":"3cf3eb43-975e-4240-b0ce-cfd2ec244211","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2c57ea62-32a4-4545-a987-2f065dc5b914"},"01823a2d-a6de-4deb-b1f1-9330c071d13d":{"kind":"popup","cta":"Next","audio_url":"","options":{"root":{"theme":"light","close_button":false,"prev_button":true,"show_step_number":false,"spot":"hard","hasSpotlight":false,"spotlightColor":"#9939eb","backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":475,"secondaryButton":false},"description":{"value":"

Going beyond fragile IOCs

Stairwell automatically provides a list of historical active DNS relationship data for every extracted hostname and IP, in addition to performing a similarity search for every hash / file extracted for various threat reports, thus answering the key question:

\"How do I know with confidence that I'm not exposed to unknown but similar tradecraft that isn't included in the original report?\"

There's a list of associated IPs to hostnames, and conversely a list of all historical hostnames to various IPs.

"},"cta":{"bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"right","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":14,"italic":false,"textUnderline":false,"color":"#ffffff","position":"right","backgroundColor":{"alpha":100,"hex":"#9939eb"},"borderColor":""},"meta":{"elementText":"","elementType":""},"version":1},"id":"0c96069c-fb8e-4b17-a32a-62f4f743a674","title":"","dom_id":"a[href=\"https://app.stairwell.com/search?open-report=2sx76zMu&object-matches-query=net.hostname+%3D%3D+r%22pbxphonenetwork.com%22\"] > .pill","page_id":"d63187c6-60ac-4e25-ba31-917700811793","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2c57ea62-32a4-4545-a987-2f065dc5b914"},"ec283f55-7d39-410b-9fa0-8401334f3746":{"kind":"tooltip","cta":"Next","audio_url":"","options":{"root":{"alignment":"lc","theme":"light","close_button":false,"next_button":true,"prev_button":true,"secondaryButton":false,"show_step_number":false,"hide_arrow":false,"backgroundColor":"#FFF","borderColor":"#807f93","frameWidth":null,"maxFrameWidth":250,"backdropRect":null,"backdropSelector":null,"offset":{"x":19,"y":53},"offsetFromOriginPx":{"x":0,"y":0},"spot":"none","hasSpotlight":false,"spotlightColor":"#9939eb","trigger":null,"zoom":null},"description":{"value":"

As a result of Stairwell collecting and preserving actual files, we can quickly perform similarity analysis to unearth similar hashes that weren't in the original threat report, quickly and confidently expanding the scope of indicators that you likely care the most about.

Constantly sweep your environment

As a continuous intelligence & detection response platform, Stairwell doesn't simply perform these searches once-- but provides you with the capability to re-assess your environment against known and unknown indicators over, and over again. You may not be exposed today, but what about tomorrow?

"},"cta":{"bold":true,"fontSize":16,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"center","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"secondary":{"value":"CTA","bold":true,"fontSize":16,"italic":false,"textUnderline":false,"color":"#F3F5F7","position":"center","backgroundColor":{"alpha":100,"hex":"#FA6219"},"borderColor":""},"js":{"value":""},"version":1},"id":"e3f30c93-9a37-433f-94a1-afb6cff18291","title":"","dom_id":"","page_id":"d63187c6-60ac-4e25-ba31-917700811793","subtitle":"","image_url":"","target_id":null,"video_url":"","stream_url":null,"description":"","target_type":null,"stream_status":null,"thumbnail_url":null,"media_duration":null,"flowId":"2c57ea62-32a4-4545-a987-2f065dc5b914"}},"flows":{"0280c605-d20a-4fcd-8144-aad2940f421f":{"id":"0280c605-d20a-4fcd-8144-aad2940f421f","name":"Value Proposition","widgets":["4e1f41e7-2dfb-4b93-8076-6c2570f44f74","4f084220-cab9-473f-98ca-eb2796988967","0d3820cc-042b-4f29-948f-b6e710e31b61"]},"ea409212-5555-4d95-938b-d8733300a742":{"id":"ea409212-5555-4d95-938b-d8733300a742","name":"Overview","widgets":["b011becf-7e2f-4b02-811f-d07584b91030","70486605-850a-457d-94e2-29a2b2e252a0","b920df2e-1f4b-4f74-bd57-ce6761be3713","82f3189f-5e69-4cfd-87de-4983069931b4","8d17eec8-1215-4708-86ef-600d5a6c09dc","1034352b-ad00-47d8-8180-e827e283c5d3","1d30b4d9-5e24-42ef-b4ca-23a67f662670","f783b187-5907-4b75-9682-ef59274ea1c7"]},"2ab3280b-3282-42b1-bae7-5d0d555827ba":{"id":"2ab3280b-3282-42b1-bae7-5d0d555827ba","name":"Search","widgets":["cde7191b-4c19-432c-9080-eac66306eb7f","c5380a3b-3690-4dac-8c7c-d88b7634671a","ef1a868b-97b6-407f-ad2d-3db4bf91b5dd","952882f9-c17f-4739-9bbb-4b27976b989b","00d15318-5065-4018-9739-c400ad58be41","3e278768-981a-430d-b20d-10bd6ec17bb9","8dea2a0b-c9f6-4845-a128-7d7b9607ccc7","e7f69fb0-ba67-423c-8da3-cdf907bfb6fb","1f4e6101-c3e3-4197-a6b1-6e0faf7078a3","53373091-caf9-4d06-9f05-f96b6f7e5010","673480a1-1b51-415f-9309-c24799d1435e"]},"8010e630-f693-4e97-95d8-659989997261":{"id":"8010e630-f693-4e97-95d8-659989997261","name":"File analysis","widgets":["fc2b2436-affa-498f-b460-83557b019715","3bf2e292-414b-4718-84b7-f4c028fabe35","df6ac8a8-0212-4067-bac0-423949c6fd92","b0b28de4-9372-419a-ad8e-b173d6e02f38","f96ea11b-9c17-47ae-813d-62347198deb0","6ecbce18-a332-483f-b052-40c1032c3514","a4735cbd-3dbe-4134-8cc0-e8e39b79f99d","e8377b48-14b6-4e05-a2e4-745282a58fd0","4125c97f-c303-4d72-bf0a-14d861ecb63d","d328e412-3f70-4996-ab18-971c49b1fab0","64832808-c934-45b6-b5ff-024ad37f0f9a","61b6448f-fdc2-4560-b939-1c282a39d557","19b4509e-e8ae-4823-91db-2f9e33bc7540"]},"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb":{"id":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb","name":"Variant Discovery","widgets":["61541cda-a9ab-4c6d-b8dc-93a63685d58d","80c0abd4-a412-4ddb-9cc8-0cb2141bbea0","61db1843-e189-43e0-8af3-a02c9d2a7a53","75d66059-a2e0-4a86-96ec-24e980302260","ae6b22bd-6937-483b-9825-015563f7506d","d8517826-9ba2-4f6f-88b9-8964b0116a4c","41cf0e3a-a516-40ad-95ab-d559938fb8e7","98be5c9a-0b55-416e-89dd-89f69fbcb1a0","c4864d3c-a7b6-43d8-a571-ee7ca585f7d5","7f36e302-478e-49d3-a2bc-1ceddd3fdf36"]},"02d1d74c-8663-41d9-a781-07d3cbf2a9cd":{"id":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd","name":"YARA","widgets":["4583930b-fe3e-47b2-a2c6-42f3b4c014cf","a0a1124e-ad36-46bf-bf51-858e2dec7987","5568bfd8-2c5b-475e-a95f-7f634a9ff087","23150c28-14f2-4bea-95a1-a14bc11fd380","60012e0d-f2b2-4ce2-967f-16806ee1639d","6bd34657-4698-42d1-9fb8-9cc8fdd56865","1e72ca24-a4d8-4b56-a6fe-b24bd22f1852","dbe55f43-b44e-40d0-83f8-e03792467b53","afb84364-e85b-4ba6-8ee5-b85a35587288","5ec409d8-19be-4668-9b2e-642a712f29e7","4cc9b5b4-da21-46be-8497-810f00d5fb94"]},"2c57ea62-32a4-4545-a987-2f065dc5b914":{"id":"2c57ea62-32a4-4545-a987-2f065dc5b914","name":"Threat Reports","widgets":["2a079c7f-50f7-4c61-8446-0ee74f0a2572","dd0ca1d2-d495-4ac1-8b82-a431a765661b","d21ba9da-ee89-472a-9dd4-1fe2ff22374d","b0e66d9c-f9ad-4cbc-a0fb-0d41bbc39537","9b44cb2e-a507-4419-94fc-25c34e615351","8183515b-30cb-4458-ae5f-ccffd1ff9640","3ad06e75-ede1-4d03-8422-4ab8f030d753","237970ff-1f0b-48b2-9fa3-99d3f3a80b82","60ddb9e5-f392-4a25-9a12-a9df68de8e83","01823a2d-a6de-4deb-b1f1-9330c071d13d","0c96069c-fb8e-4b17-a32a-62f4f743a674","ec283f55-7d39-410b-9fa0-8401334f3746","e3f30c93-9a37-433f-94a1-afb6cff18291"]}},"projects":{"6db98f3e-3847-44d5-b347-fa4e0996c307":{"id":"6db98f3e-3847-44d5-b347-fa4e0996c307","url":"https://app.stairwell.com/dashboard?%3Fasset-details=context-and-details&fe_62=true&fe_62=true","kind":"html","name":"Stairwell Website Tour","flows":["0280c605-d20a-4fcd-8144-aad2940f421f","ea409212-5555-4d95-938b-d8733300a742","2ab3280b-3282-42b1-bae7-5d0d555827ba","8010e630-f693-4e97-95d8-659989997261","ffa96607-ce4e-48d2-a4c5-faaaf6b932eb","02d1d74c-8663-41d9-a781-07d3cbf2a9cd","2c57ea62-32a4-4545-a987-2f065dc5b914"],"pages":[{"id":"7d6fb94f-6dab-43ab-88fb-4a1f2f11c743","url":"https://app.stairwell.com/","kind":"html","name":"dashboaard_2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/rvtbdxq87hrjikks45fwjgwe8y5w.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/28f449fa-2199-4506-b02a-516f3625b29a","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"d16810d5-49b7-4f17-bdf0-2e2bbb7cb81e","url":"https://app.stairwell.com/","kind":"html","name":"search_landing_2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/os9pcfgckcm1w54v3w3azd3wcpnd.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/61869761-283d-4773-ab15-419b3adb65de","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"2ddfbae3-ccc9-4894-9357-4fde0f333e08","url":"https://app.stairwell.com/","kind":"html","name":"search-builder-old","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/z5tljtms2kq54b6cenj0pohctec4.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/d4ac7c2f-f3df-41e4-ac68-093c8751c464","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"b7d86fb1-4d17-4675-a4d5-a9437fc1d00b","url":"https://app.stairwell.com/","kind":"html","name":"search-builder-new","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/bw1jbbirg07p48dukfksqpmpqual.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/793be892-196d-4682-8c52-2e4bf1e36ee9","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"55843d9c-3117-4793-bee7-e68275da244a","url":"https://app.stairwell.com/search","kind":"html","name":"search-builder-2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/rw85iq8gkxew8o2zf5k4pbo3ibeu.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/45f13b48-e73a-4132-b640-efa0ed5e0308","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"3c463b72-30c5-4f66-8329-6e644e505ebd","url":"https://app.stairwell.com/","kind":"html","name":"search-builder-2","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/5l5wm0oodj762nve1i1lwqqusntn.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/caf892ed-9e0d-4b13-b2c7-800ef95448d5","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"5b1931ff-9754-48f1-bb6a-b7738437c8ea","url":"https://app.stairwell.com/","kind":"html","name":"search-builder-new-2","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/oi7h2rasivruzxbaeyt25iv9vm8x.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/91039707-d662-432e-a2c2-07e7c74ab90d","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"bacc3097-352d-4875-86e7-09f729914a8e","url":"https://app.stairwell.com/","kind":"html","name":"search-query-complete","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/d4i87pxk0r1eky43glh9uwarb1lj.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/7d30a2da-9134-4f33-be89-7c317744ca13","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"fe9808a4-72d0-46f2-b721-66d4af094a11","url":"https://app.stairwell.com/search","kind":"html","name":"search-query-complete-2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/ypy1ozuf7qdh1y9y73aty9ryf9dd.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/7cda74d0-9ea4-4b61-aaca-87098691a273","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","url":"https://app.stairwell.com/","kind":"html","name":"search-builder-results","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/xw33bqql25obss5pocmty8w9rbb1.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/d9996794-d0e3-4bf7-ab78-44f1dbe4eb7d","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"5bf05864-6905-47fe-aa4c-3d0cfa93aab8","url":"https://app.stairwell.com/search?object-matches-query=asset.count+%3C+5+%26%26+object.path.contains%28r%22System32%22%29","kind":"html","name":"search-results-2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/g4ft3hu6jeqnp14oyzshwvezam88.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/9b02cdea-5417-4398-8300-b84bc4e8b695","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"3f24072e-c0b3-494c-b049-c2206e5dd6f4","url":"https://app.stairwell.com/search?hex-viewer-selection=3-116478-116541&object-matches-query=asset.count+%3C+5+&&+object.path.contains(%22System32%22)&full-panel-type=object&full-panel-value=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf","kind":"html","name":"search-results-details","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/xlitd2jui9t9ecuv1dlubhq1dhrs.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/3e1396a6-8d05-410f-8119-2367cc4124ce","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"08e303a6-4ec2-431b-a05d-b1a19e290097","url":"https://app.stairwell.com/search?object-matches-query=asset.count+%3C+5+%26%26+object.path.contains%28r%22System32%22%29&full-panel-type=object&full-panel-value=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf&full-panel-pivot=sightings","kind":"html","name":"search-results-details-2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/prkbrug8hkqxqy9qa9lkpgfva6lg.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/814b038a-4e82-4cc9-9d07-40c589e15aea","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"13f2a739-1581-487a-aba0-8505ae9c0816","url":"https://app.stairwell.com/search?hex-viewer-selection=3-116478-116541&object-matches-query=asset.count+%3C+5+&&+object.path.contains(%22System32%22)&full-panel-type=object&full-panel-value=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf","kind":"html","name":"search-results-sightings","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/97t0c7ua37j4wdurejhqbus8e05v.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/85126c98-7df6-46a1-9886-62474cec1578","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"eeb6f0f9-4579-48d6-8b99-02cc5e35eac8","url":"https://app.stairwell.com/search?object-matches-query=asset.count+%3C+5+%26%26+object.path.contains%28r%22System32%22%29&full-panel-type=object&full-panel-value=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf&full-panel-pivot=summary","kind":"html","name":"search-results-sightings-2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/3erb2w03iw9q4x4iqhetfywl224b.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/c5f372af-e028-442c-bcdb-709b5370f9b7","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"8870c9c2-8167-4edd-b6b6-1783cf28d375","url":"https://app.stairwell.com/search?hex-viewer-selection=3-116478-116541&object-matches-query=asset.count+%3C+5+&&+object.path.contains(%22System32%22)&full-panel-type=object&full-panel-value=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf","kind":"html","name":"variant-discovery-v2","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/pxt5pwttn0nylg0plfk6lodraagt.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/ddc63bc7-169c-4a93-9684-e563d9304a41","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"ddbe537e-2c8e-485c-83d8-5c11657b93c0","url":"https://app.stairwell.com/rules?org_env_id=BJJKNH-MCGB8F-WAED6B-3ELG8CPJ&half-panel-type=rule&half-panel-value=BJJKNH-MCGB8F-WAED6B-3ELG8CPJ.Mandiant_Advantage_DOUBLEJUMP_Exploit","kind":"html","name":"variant-search-2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/bimh7vqvw3wwqh01qgmepl1dd14h.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/c5e341bb-3ff1-4535-baa0-c3451de5023e","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"72f75c9e-704e-42c3-a77d-b3f02650b9bc","url":"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&full-panel-type=create-new-rule&full-panel-value=new-rule","kind":"html","name":"search-yara-results-old","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/j3v9615a2avptalq8f8i3wvnjqzz.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/c6899a61-dddb-4b84-845f-80ee75fc0406","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"acb76e8a-f566-44e3-9ba1-869d3daeaa85","url":"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&full-panel-type=create-new-rule&full-panel-value=new-rule","kind":"html","name":"object-details","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/olmc6ykctreilam3urh1fh2ojod0.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/285a4519-1672-421d-a04e-fb44a63eec29","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"e4bed6f1-dd02-41f6-a455-bb70a7099fce","url":"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&full-panel-type=create-new-rule&full-panel-value=new-rule","kind":"html","name":"object-details-2","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/zxnb371n9o7j6ttgcozfe53f5z9w.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/8c213a4b-35a1-4064-a043-e4e808f4b428","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"2373a6c4-5d98-4700-be62-144a81551345","url":"https://app.stairwell.com/dashboard??object-details=details&hex-viewer-selection=a--138-138","kind":"html","name":"variant-search","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/85xb5e969hqju4datt83hiovazq8.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/4ee257bf-524c-4fb9-8500-646394db31eb","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"77e49071-d004-4457-8416-fb0c6f1e21fc","url":"https://app.stairwell.com/dashboard??object-details=details&hex-viewer-selection=a--138-138","kind":"html","name":"variant-search-2","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/pik7wygmqr63buap4qhdugr0iblc.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/b95f3f01-769d-4ce9-837b-c3531d346b28","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","url":"https://app.stairwell.com/dashboard?%3Fasset-details=context-and-details&fe_62=true&fe_62=true","kind":"html","name":"yara-rules","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/edub04re1owrrljk771rdz9p0o2j.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/8953a64b-bf69-43ba-91dc-2a56445b5d16","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"6d884c41-9ea0-40d7-8237-f57c223cb0fe","url":"https://app.stairwell.com/rules?org_env_id=BJJKNH-MCGB8F-WAED6B-3ELG8CPJ&setting-type=asset","kind":"html","name":"yara-rules-2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/al2dryxjodcrww9hoolezlddptz1.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/b9405c81-7093-4cce-b242-3b074ca3c522","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"e166082b-7967-4834-a07a-ff37e8117482","url":"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&fe_62=true&half-panel-type=create-new-rule&half-panel-value=new-rule","kind":"html","name":"rules-editor","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/aqdfffjg9c294os0mgsd2f6gexxj.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/01e678f2-4b61-4695-8b9e-9ccc85c3aee9","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"7393590f-bb5d-495f-bc1d-e8959a662ba1","url":"https://app.stairwell.com/rules?org_env_id=BJJKNH-MCGB8F-WAED6B-3ELG8CPJ&setting-type=asset","kind":"html","name":"rules-editor-2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/vcahg71l1psgrnhr1c29mucgx8c2.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/65d773e4-10e6-464d-ae08-0f5f31d87f98","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"fe27353f-e92b-4cf9-b10c-bc99e4d29cb6","url":"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&full-panel-type=create-new-rule&full-panel-value=new-rule","kind":"html","name":"rules-editor-tests","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/umot303pkzc6tedv81446yh6yp97.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/b1c4f54f-3a8e-47b4-8ecb-41193c7b3824","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"d8f4ed4c-d9b2-4034-bcf5-78af949ca1cf","url":"https://app.stairwell.com/rules?org_env_id=BJJKNH-MCGB8F-WAED6B-3ELG8CPJ&setting-type=asset&full-panel-type=create-new-rule&full-panel-value=new-rule","kind":"html","name":"rules-editor-tests-2.24.2023","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/1q688v6hog5f190fvq2jcp7hih86.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/a58ab97c-665c-44d7-a9c2-c2febabfe283","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"ce2fd8ac-919e-48c3-a89c-ecf112ac91ee","url":"https://app.stairwell.com/","kind":"html","name":"threat-reports-overview","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/ec4q587v18anvi7k9xib0v1o6b8h.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/f991ec86-3945-4cad-b2c3-dac7eb63a4cf","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"5d23b68a-0a49-46bb-b69f-d4365ce27bdc","url":"https://app.stairwell.com/threat-reports","kind":"html","name":"Stairwell - Inception","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/9yhmsdmbdb3bs61m0ot4piqyl1xs.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/0b23c4f7-6444-4ee5-a5c5-8bbb0169b1a3","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"ff1da6c6-2db3-41d7-949c-76a5393065c5","url":"https://app.stairwell.com/","kind":"html","name":"search-07-21-23","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/xbsjvgapos75ez4i6sw9tjktkf6g.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/ceae27d3-6c54-4291-84ce-5562e491c3e1","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"3cf3eb43-975e-4240-b0ce-cfd2ec244211","url":"https://app.stairwell.com/threat-reports","kind":"html","name":"Stairwell - Inception","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/t1033za1bib8tytpogivz0dl1ojw.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/a2623bf3-9ffe-4fc8-97c2-936e6ba7ef76","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"781d8e72-94dd-42fd-8168-ffdce25a8604","url":"https://app.stairwell.com/","kind":"html","name":"Stairwell - Inception","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/p4x7rekythyxx2dm1y7qgzi46l1b.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/109aca04-5443-4ffa-b9e0-a25c2f1de882","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"d63187c6-60ac-4e25-ba31-917700811793","url":"https://app.stairwell.com/threat-reports?half-panel-type=threat-report&half-panel-value=2sx76zMu&half-panel-pivot=iocs&open-report=2sx76zMu","kind":"html","name":"Stairwell - Inception","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/qlpln4x8a3nzh7dobe4va8j8uiwb.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/9bbd8ae7-1efa-4fe9-aeb4-b990f1b26ca3","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"ac1f4fef-308c-4bbd-813c-9900878f4da9","url":"https://app.stairwell.com/","kind":"html","name":"search-07-21-23-2","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/o46dwb5txd5c7kxar69gfo5zpwiy.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/301429be-ccab-43c0-95f7-23831500b378","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"db639d61-4ab7-46d3-8fc5-46c67b41ac04","url":"https://app.stairwell.com/","kind":"html","name":"search-07-21-23-3","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/atirn67qkw90jukinp3hzsors3dg.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/03427a04-685e-4178-9639-a7475a9bd877","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"0847e531-dd7c-44fc-ba07-f29eb787e783","url":"https://app.stairwell.com/","kind":"html","name":"search-07-21-23-4","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/mbt0ohxgzjz5uuiecc368vxev5ch.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/6808c1cb-e27c-43d0-b795-12cad6f86d4f","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"1008f40a-856b-4491-9a19-a114112213e5","url":"https://app.stairwell.com/","kind":"html","name":"search-07-21-23-searched","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/g82oiyu4xcbcujt6nmstxkegf7lz.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/c4b0d7a9-2774-4c52-b7c7-b36ef5c8a88e","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"d6ce88a9-9c22-44d3-8aaa-38dee1686fc4","url":"https://app.stairwell.com/","kind":"html","name":"Stairwell - Inception","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/0u7fufwo4ywqfnp36mzqhxhqsmqm.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/5e24ed2a-44f3-4e77-878d-bcfb2bed5241","bg_image_file_url":null,"ext_capture_version":"v1"},{"id":"9c06328b-309b-45dc-befd-8efcb21736cb","url":"https://app.stairwell.com/","kind":"html","name":"search","assets":{},"coords":null,"file_url":"https://app-pages.storylane.io/company/company_aadabaf7-98c0-46f8-a39d-06675353652e/project/project_6db98f3e-3847-44d5-b347-fa4e0996c307/page/ody6ryv4cqbg693hdhproshngfoe.html","asset_urls":[],"dimensions":{"width":0,"height":0},"stream_url":null,"stream_status":null,"thumbnail_url":"https://hcti.io/v1/image/d1b6b858-89fb-472f-929d-ff212c0e0e1b","bg_image_file_url":null,"ext_capture_version":"v1"}],"flowlists":[{"id":"961d16e0-6df7-40b7-bd4e-7f125ef71a54","items":[{"id":"69a257c6-61ad-4f5e-be74-49d4c3319bcd","name":"Welcome to Stairwell - Start here!","description":"A quick overview","target_kind":"flow","target_value":"0280c605-d20a-4fcd-8144-aad2940f421f","target_options":{}},{"id":"469eb4a0-b596-4458-86cb-5b354bdd9da8","name":"Platform overview","description":"Peek into the dashboard","target_kind":"flow","target_value":"ea409212-5555-4d95-938b-d8733300a742","target_options":{}},{"id":"9b545cd6-6940-4a50-86ed-20923795c3eb","name":"Search","description":"Possess the power of search","target_kind":"flow","target_value":"2ab3280b-3282-42b1-bae7-5d0d555827ba","target_options":{}},{"id":"d57408de-ff1e-4a14-bddf-257400cc0f0c","name":"Rich file analysis","description":"Take a look at the depth of visibility upon every file collected","target_kind":"flow","target_value":"8010e630-f693-4e97-95d8-659989997261","target_options":{}},{"id":"cc128419-060c-4eac-a0a3-dc55c136a07e","name":"Variant discovery","description":"Find variants of files within seconds","target_kind":"flow","target_value":"ffa96607-ce4e-48d2-a4c5-faaaf6b932eb","target_options":{}},{"id":"752bece7-991b-4cd0-9e13-36cbbc9dc681","name":"Operationalizing threat intelligence","description":"Automatically consume various threat reports, enrich and answer key questions with ground truth","target_kind":"flow","target_value":"2c57ea62-32a4-4545-a987-2f065dc5b914","target_options":{}},{"id":"4101fd26-5143-4a72-bd85-efe536bc9b61","name":"YARA","description":"Learn how Stairwell operationalizes YARA at-scale","target_kind":"flow","target_value":"02d1d74c-8663-41d9-a781-07d3cbf2a9cd","target_options":{}},{"id":"4d3fddae-ec3e-4d7b-93aa-c08159ee636e","name":"Contact the team","description":"Get in touch with the Stairwell team to learn more","target_kind":"external_url","target_value":"https://stairwell.com/contact/?utm_medium=Website&utm_source=Freemium&utm_campaign=2023-01-GLOB-Demand-Website-Freemium-Inception_Tour","target_options":{}}],"options":{"root":{"position":"center","completeOnClick":true,"autoStartEnabled":false},"title":{"value":"Stairwell tour"},"launch":{"color":"#ffffff","value":"STAIRWELL TOUR","offsetX":"0","offsetY":"0","position":"right","backgroundColor":"#FA6219"},"description":{"value":"Here's a quick checklist of things to try"}}}],"page_links":{"06Nm0CawdkHN6C8eSssU2":{"id":"06Nm0CawdkHN6C8eSssU2","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0&object=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"]"},"07TAbG8gnHfJG3TjVCShD":{"id":"07TAbG8gnHfJG3TjVCShD","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&create-new-rule=\"]"},"0Ov4bqeUmJb9nxthkKp79":{"id":"0Ov4bqeUmJb9nxthkKp79","type":"page","target":"fe27353f-e92b-4cf9-b10c-bc99e4d29cb6","options":{"pageId":null},"selector":"html > .ms-Fabric--isFocusHidden > #root > .dark > .app-shell > .activity-pane-container > .panel-view > .panel-view-content > .css-99 > .ms-Stack > .test-scan-toggle > .ms-Button-flexContainer > .ms-Button-textContainer > #id__68"},"1sNIZY7PEIlRm4FV5DLqT":{"id":"1sNIZY7PEIlRm4FV5DLqT","type":"page","target":"e166082b-7967-4834-a07a-ff37e8117482","options":{"pageId":null},"selector":"html > .ms-Fabric--isFocusHidden > #root > .dark > .app-shell > :nth-child(3) > .detail-pane > .content-container > .ms-Stack.flex > .action-bar > .css-197 > .body-97 > .test-scan-container > :nth-child(1) > .top-actions-container > .ms-Button > .ms-Button-flexContainer > .ms-Icon"},"5qz8xvEFYYkUjzkI-S2yf":{"id":"5qz8xvEFYYkUjzkI-S2yf","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"6Uuvz-qwn50RUcxewyOAX":{"id":"6Uuvz-qwn50RUcxewyOAX","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0&object=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"]"},"6rIc23kXz2hc9k3_M_4_U":{"id":"6rIc23kXz2hc9k3_M_4_U","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"84ODds_Mcilp2cobIDPN1":{"id":"84ODds_Mcilp2cobIDPN1","type":"page","target":"72f75c9e-704e-42c3-a77d-b3f02650b9bc","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"8x-uYY-2z82oN7Xwow2D-":{"id":"8x-uYY-2z82oN7Xwow2D-","type":"page","target":"bacc3097-352d-4875-86e7-09f729914a8e","options":{"pageId":null},"selector":"html > body > #root > .dark > .app-shell > .activity-pane-container > .activity-pane > .search-landing > .css-97 > .search-bar-container > .search-input-container > .ms-Stack > .query-builder-toggle > .ms-Button-flexContainer > div > svg"},"9_t41JomiP2AgzarrF0cc":{"id":"9_t41JomiP2AgzarrF0cc","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&fe_62=true&fe_62=true\"]"},"9fuOzHwUjoxPmkz24cB9H":{"id":"9fuOzHwUjoxPmkz24cB9H","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"A6aUorNAtkNWmPLC59S9o":{"id":"A6aUorNAtkNWmPLC59S9o","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"B63Tq3pgmKi_VlrUt9NWs":{"id":"B63Tq3pgmKi_VlrUt9NWs","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"D1BDdYuyrG68g6RFYmJTB":{"id":"D1BDdYuyrG68g6RFYmJTB","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"Er5WKQfN6F6e0q9TIQ4A6":{"id":"Er5WKQfN6F6e0q9TIQ4A6","type":"page","target":"acb76e8a-f566-44e3-9ba1-869d3daeaa85","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?search-mode=adv&search-query=asset.count+%3C+5+%26%26+object.path.contains%28r%22System32%22%29&search-pivot=Objects&object=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"]"},"IdkQ4kennCvWsj-r1KiyG":{"id":"IdkQ4kennCvWsj-r1KiyG","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"Jueu8iF0BJpIbpm4JYNmz":{"id":"Jueu8iF0BJpIbpm4JYNmz","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"K4duwxLZ2cjp6SL5cUVhW":{"id":"K4duwxLZ2cjp6SL5cUVhW","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"KuZvrofQV6jOh1c0e28zs":{"id":"KuZvrofQV6jOh1c0e28zs","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"Ms-bVlpmBHIQSZMm_ume_":{"id":"Ms-bVlpmBHIQSZMm_ume_","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0&object=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"]"},"NV2HmIXpm9WUfhh7ZjDyP":{"id":"NV2HmIXpm9WUfhh7ZjDyP","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"OX8jRXV5oT8IFSYSt9t-H":{"id":"OX8jRXV5oT8IFSYSt9t-H","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"OYtG8l7rfRyCy_3a7HJCI":{"id":"OYtG8l7rfRyCy_3a7HJCI","type":"page","target":"acb76e8a-f566-44e3-9ba1-869d3daeaa85","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0&object=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"]"},"PQGSQI1nPMIjBFoQ3vWxQ":{"id":"PQGSQI1nPMIjBFoQ3vWxQ","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"R1abLGGVQ__J3drJpAXBV":{"id":"R1abLGGVQ__J3drJpAXBV","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"R2SWD95os2-4MrDIZNSBU":{"id":"R2SWD95os2-4MrDIZNSBU","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"Sdafb2l4BIlSkeDlB5J1K":{"id":"Sdafb2l4BIlSkeDlB5J1K","type":"page","target":"72f75c9e-704e-42c3-a77d-b3f02650b9bc","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"UhFoe5DR6HDWBMpaa3NtL":{"id":"UhFoe5DR6HDWBMpaa3NtL","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&fe_62=true&fe_62=true\"]"},"XcZXHXogYdueh79yPilCD":{"id":"XcZXHXogYdueh79yPilCD","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"html > .css-0 > #fluent-default-layer-host > :nth-child(3) > .ms-Fabric > :nth-child(1) > .ms-Modal > #ModalFocusTrapZone45 > .ms-Modal-scrollableContent > .query-builder-dialog > .ms-Dialog-inner > .ms-Dialog-content > form > .ms-Dialog-actions > .ms-Dialog-actionsRight > :nth-child(2) > .ms-Button > .ms-Button-flexContainer > .ms-Button-textContainer > #id__483"},"YR4pIuw1UlrwXi4-p8GOK":{"id":"YR4pIuw1UlrwXi4-p8GOK","type":"page","target":"72f75c9e-704e-42c3-a77d-b3f02650b9bc","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"YzEpZaZWBkIuR5wWa9ueQ":{"id":"YzEpZaZWBkIuR5wWa9ueQ","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"html > .ms-Fabric--isFocusHidden > #root > .dark > .app-shell > .activity-pane-container > .panel-view > .panel-view-header > .ms-Stack > :nth-child(3) > .ms-Button > .ms-Button-flexContainer > .ms-Icon"},"_NkKw5v-VJbqmYexcefKb":{"id":"_NkKw5v-VJbqmYexcefKb","type":"page","target":"2373a6c4-5d98-4700-be62-144a81551345","options":{"pageId":null},"selector":"html > .ms-Fabric--isFocusHidden > #root > .dark > .app-shell > .body-97 > .detail-pane > .content-container > .actions > :nth-child(1) > .ms-Button > .ms-Button-flexContainer > div > svg"},"aAcXsLRNPl9TZY0YfoSQc":{"id":"aAcXsLRNPl9TZY0YfoSQc","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"bHgkf5dfGbe6lmfS4BUVu":{"id":"bHgkf5dfGbe6lmfS4BUVu","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"d0uBAPMBCw00BBsyJc1cU":{"id":"d0uBAPMBCw00BBsyJc1cU","type":"page","target":"72f75c9e-704e-42c3-a77d-b3f02650b9bc","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"dfcbimvJx9Qq-or6Qd6jR":{"id":"dfcbimvJx9Qq-or6Qd6jR","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0&object=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"]"},"eGXS2-BECLTlFiLBHxo2m":{"id":"eGXS2-BECLTlFiLBHxo2m","type":"page","target":"e4bed6f1-dd02-41f6-a455-bb70a7099fce","options":{"pageId":null},"selector":"html > .ms-Fabric--isFocusHidden > #root > .dark > .app-shell > .body-97 > .detail-pane > .content-container > .ms-Stack.flex > .with-padding > :nth-child(1) > .ms-Pivot > #Pivot4986-Tab1 > .ms-Button-flexContainer > .ms-Pivot-linkContent > .ms-Pivot-text"},"eKYRnUV9Z-LSMu7Ia9D6u":{"id":"eKYRnUV9Z-LSMu7Ia9D6u","type":"page","target":"72f75c9e-704e-42c3-a77d-b3f02650b9bc","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"f54Ws9s4KTOMMXGHXq3De":{"id":"f54Ws9s4KTOMMXGHXq3De","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"fCMDgKNnKAgKDcDOEgioI":{"id":"fCMDgKNnKAgKDcDOEgioI","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details\"]"},"ft6IIEx4QtnMeGHc5utwr":{"id":"ft6IIEx4QtnMeGHc5utwr","type":"page","target":"e166082b-7967-4834-a07a-ff37e8117482","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&fe_62=true&fe_62=true&create-new-rule=\"]"},"h8sFnEo6O0Q3ksZo8WSfM":{"id":"h8sFnEo6O0Q3ksZo8WSfM","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"i7c0lfmjRZonTsvjxVu3j":{"id":"i7c0lfmjRZonTsvjxVu3j","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"isDgwdjBgV3pbFyH-YEO9":{"id":"isDgwdjBgV3pbFyH-YEO9","type":"page","target":"72f75c9e-704e-42c3-a77d-b3f02650b9bc","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"kWSMisLj4Jir45C_wikIz":{"id":"kWSMisLj4Jir45C_wikIz","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?search-mode=adv\"]"},"lGtyISGrwUl4EHy0C1emA":{"id":"lGtyISGrwUl4EHy0C1emA","type":"page","target":"72f75c9e-704e-42c3-a77d-b3f02650b9bc","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"mGfkQU095hKGb0nV_U2Bh":{"id":"mGfkQU095hKGb0nV_U2Bh","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"nJMtOic7FMyqppnXF-4B0":{"id":"nJMtOic7FMyqppnXF-4B0","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"naKIcyOfEdqBViB3-L61L":{"id":"naKIcyOfEdqBViB3-L61L","type":"page","target":"77e49071-d004-4457-8416-fb0c6f1e21fc","options":{"pageId":null},"selector":"html > body > #root > .dark > .app-shell > .activity-pane-container > .activity-pane > .metaphor > .content-container > .metaphor-content > .content > .variants > .button-container > .ms-Button > .ms-Button-flexContainer > .ms-Icon"},"o3mrflIcu7fql_bwBiwZZ":{"id":"o3mrflIcu7fql_bwBiwZZ","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules\"]"},"pkmc9B2hZj4oRsu7BdxJm":{"id":"pkmc9B2hZj4oRsu7BdxJm","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0&object=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"]"},"q7wjJ80zFSB6gi7g2f3Q2":{"id":"q7wjJ80zFSB6gi7g2f3Q2","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"r5CzuJuQj0lndsMqKwLUq":{"id":"r5CzuJuQj0lndsMqKwLUq","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0&object=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"]"},"rRFN8GiAUalUlG5eOUqu9":{"id":"rRFN8GiAUalUlG5eOUqu9","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"sstpgCWcYyCA5SrP8cEhw":{"id":"sstpgCWcYyCA5SrP8cEhw","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"uDF72d6ZDqduGt0bLMS8x":{"id":"uDF72d6ZDqduGt0bLMS8x","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=details&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"uJ6c4Q7kC8BSgN05ZJXXf":{"id":"uJ6c4Q7kC8BSgN05ZJXXf","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fobject-details=details&hex-viewer-selection=a--138-138&search-mode=adv\"]"},"vsCgxUqdmyB6LZU5ERsjY":{"id":"vsCgxUqdmyB6LZU5ERsjY","type":"page","target":"acb76e8a-f566-44e3-9ba1-869d3daeaa85","options":{"pageId":null},"selector":"html > .ms-Fabric--isFocusHidden > #root > .dark > .app-shell > .body-97 > .detail-pane > .content-container > .flex.css-137 > .with-padding > :nth-child(1) > .ms-FocusZone > #Pivot4986-Tab0 > .ms-Button-flexContainer > .ms-Pivot-linkContent > .ms-Pivot-text"},"wOv0xNNQcKbQjw47RYIVz":{"id":"wOv0xNNQcKbQjw47RYIVz","type":"page","target":"667581a7-1b4b-4939-881a-d4efb2b4c2a7","options":{"pageId":null},"selector":"html > .css-0 > #fluent-default-layer-host > :nth-child(3) > .ms-Fabric > :nth-child(1) > .ms-Modal > #ModalFocusTrapZone1003 > .ms-Modal-scrollableContent > .query-builder-dialog > .ms-Dialog-inner > .ms-Dialog-content > form > .ms-Dialog-actions > .ms-Dialog-actionsRight > :nth-child(2) > .ms-Button > .ms-Button-flexContainer > .ms-Button-textContainer > #id__1020"},"wyNFCEvzvcNx3ZvqPCp6L":{"id":"wyNFCEvzvcNx3ZvqPCp6L","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0\"]"},"x1aSdmemkkDW_TgWlFGLW":{"id":"x1aSdmemkkDW_TgWlFGLW","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?search-mode=adv&search-query=asset.count+%3C+5+%26%26+object.path.contains%28r%22System32%22%29&search-pivot=Objects\"]"},"x3Wh4bUU9W1au83Z35LmY":{"id":"x3Wh4bUU9W1au83Z35LmY","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details\"]"},"yJi3EALOZ24r-oVdZ9R5P":{"id":"yJi3EALOZ24r-oVdZ9R5P","type":"page","target":"eaf83abe-a0f3-42b7-b66a-e2a0e9044578","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/rules?%3Fasset-details=context-and-details\"]"},"zoDaYIBeEBgnZ4AD6e1n2":{"id":"zoDaYIBeEBgnZ4AD6e1n2","type":"page","target":"acb76e8a-f566-44e3-9ba1-869d3daeaa85","options":{"pageId":null},"selector":"a[href=\"https://app.stairwell.com/search?%3Fasset-details=context-and-details&object-details=context&object-matches-query=rule.name+%3D%3D+r%22HermeticWiper%22+%26%26+object.environment_id+%3D%3D+%22BJJKNH-MCGB8F-WAED6B-3ELG8CPJ%22&object-sort=0-0&object=2c10b2ec0b995b88c27d141d6f7b14d6b8177c52818687e4ff8e6ecf53adf5bf\"]"}},"flows_count":7,"pages_count":40,"image_tokens":{},"start_page_id":"7d6fb94f-6dab-43ab-88fb-4a1f2f11c743","widgets_count":69,"company_id":"aadabaf7-98c0-46f8-a39d-06675353652e","display_config":{"font":null,"replay":true,"cta_url":"","nav_bar":false,"cta_text":"Book a Demo","auto_play":-1,"cta_align":"bottom_right","cta_color":"#FFFFFF","cta_emoji":"1f449","min_width":600,"auto_scale":true,"cta_enabled":false,"full_screen":false,"nav_bar_color":"#FA6219","cta_url_target":"_self","meta_tag_title":"Inception Website Tour v1","renderer_title":"","mobile_viewport":false,"page_link_hints":true,"renderer_margin":null,"min_width_warning":true,"renderer_dimensions":null,"cta_background_color":"#1A1348","meta_tag_description":"","page_link_toast_text":"","page_link_hover_hints":false,"renderer_border_color":"none","min_width_warning_text":"Your screen size looks to small for the demo experience","renderer_background_color":null,"page_link_hover_hints_color":"#1D6ADF"},"presenter_notes_available":false,"private_visibility":false,"scripts":[],"whitelabel":{"logo":null,"favicon":null,"site_name":null,"loader":"default","logo_href":null,"brand_name_enabled":true,"product_logo_enabled":true,"header_link_url":"https://www.storylane.io","header_link_text":"Go to Storylane","resume_demo_text":"Resume Demo","resume_demo_color":"#FFFFFF","resume_demo_bg_color":"#E0007A","replay_demo_text":"Replay Demo","replay_demo_color":"#FFFFFF","replay_demo_bg_color":"#E0007A"},"feature_flags":{"auto_scale":true,"responsive_html_demo_player":false,"responsive_image_demo_player":false,"autoscale_vendor_form":false,"custom_cta":true,"ext_font_optimization":false,"ext_image_optimization":false,"ext_multi_tab_capture":true,"ext_gmail_plugin":true,"ext_html_capture_send_cookies":false,"page_links_ignore_query":false,"shadow_dom_editing":false,"keep_demo_scroll_position":false,"pre_render_next_page":false,"disable_ai_features":false,"html_tokens":true,"agora_export":true,"tavus_ai_twins":true,"ai_html_editing":true,"batch_edit_html_pages":false,"create_with_ai":true},"lead_cookie_tracking_enabled":true,"translation_animation_enabled":true,"ga_measurement_id":null,"gtm_container_id":null,"cookie_consent_required":false}}},"result":{"project":"6db98f3e-3847-44d5-b347-fa4e0996c307","substitutions":[{"id":"334a06d7-8e2e-45e6-a030-a8f08dc8ec61","key":"first_name","kind":"text","options":{},"value":null},{"id":"a2948593-cb56-428d-adf6-71864eb2ea7a","key":"last_name","kind":"text","options":{},"value":null},{"id":"9915b429-8a7d-456a-b180-dd060a174320","key":"company_name","kind":"text","options":{},"value":null}],"link":{"tagged_email":null}}}}