Help Center/ SecMaster/ User Guide/ Log Audit/ Query and Analysis Syntax - V2/ Functions/ Threat Analysis Functions
Updated on 2026-02-06 GMT+08:00
View PDF
Share

Threat Analysis Functions

The following table lists the threat analysis functions supported by SecMaster SQL syntax.

Table 1 Threat analysis functions supported by SecMaster SQL syntax

Function

Function Description

sm_lookup_ti (string1, string2)

string1 indicates the type of threat indicators to be queried. The value can be ip, url, ak, or geo.

string2 indicates the specific value to be queried.

Function example: sm_lookup_ti('ip','0.0.0.0'). This function returns the threat indicators for the IP address 0.0.0.0.
Parent topic: Functions