Filter

You can use the filter to display only those rows in the table which comply with certain criteria. The commands for the filter are grouped in the table context menu and in the header context menu.

If the filter is enabled, the filter parameters are displayed in the row below the table header.

You can enable and disable the filter with the - Filter command in the table header context menu.

Filter By Selection

This command is convenient, if your table contains too many rows and you are only interested in some of them. Some tables (tabs) can contain item lists of considerable length. You can right-click on a specific item and select Filter By Selection from the context menu. This will enable a filter in the table which will only display the rows containing the selected value.

For example, the Detection tab in the Main Window main contain a long list of various detections. If you are only interested in software detections, i.e. the rows with the "software" value in their "Kind" columns, you can find a single software detection row, right-click on the value in the "Kind" column and select - Filter By Selection in the context menu. This will enable a filter which will filter out all entries that do not contain the value selected in the "Kind" column.

Note:

The command Filter By Selection can be located in the Table submenu.

Filter Excluding Selection command

This command is used in a way that is similar to the Filter By Selection command. The difference between these two filters is that the second filter will filter out all rows with the selected value in their rows. All other rows will be displayed.

Advanced filter

If a filter is enabled, you can adjust its settings manually in the row below the header. If you enter some text into any column, the table will only display those rows, whose value in its respective column begins with the text string you have entered. Diacritic characters are ignored.
The asterisk character replaces any number of any characters. For example, if you type "ar", the filter will only display values that contain the "ar" sub-chain. Entering "*ar*" would give you the same result, because the asterisk is attached to the beginning and to the end of each text string automatically.
You can also use the row below the header to enter a Boolean expression, e.g.

"*ar*" or "*unk*"

The parts of the text that you are searching for must be enclosed in inverted commas. The expression can use the following operators:

You can use the operators >, <, >=, <=, <> (inequality) for columns with numeric values or data. Example of a filter to display records for 3 months of 2006:

>=01.03.2006 and <01.04.2006

The keywords provided in the table below can only be used in filters for columns with Yes/No (Boolean) values:

Keyword

yes

no

If the column is a number, you can use mathematic operators ">" (greater than), "<" (less than), "!,Not,<>,!=" (negation, not, not equal to), "=,==" (equal to)

If the column is a date, you can additionally use the following keywords:

now – sets the filter to the current date and time with a tolerance of +- 2 hours.
today – sets the filter to the current date.