Threat Response can handle a vast list of observables. For instance, you can search for IP addresses, domains, URLs, file hashes, MAC addresses, or even a specific device or specific user. You can get a full list of observables you can search for within the in-product help section.
Learn more about Threat Response here, or check out other FAQs here.
