Skip to content
  • There are no suggestions because the search field is empty.

Guidelines for using multiple search components (free text, Entity searches, Filters, Lexicon entries, Search Blocks) in the same search

Generally, using multiple different search components AND together; using multiple of the same search component (but different values) OR together. The only exception applies to the Free Text field, detailed below. The following are search components and their behaviors:
  • Entity Search is a component. Note: Using two types of Entity Searches (for example, Emails and IP Addresses) in the same search would be the same search component with different values, and would OR together in your search. Using an Entity Search with a Filter (for example, Email Entity Search and a Groups Forum filter) would AND together in the search.
  • Each Filter is a component; a Network filter and a Has Entity filter are two different components and would AND together. Using two Network filters (for example, Network Onion, Network Telegram) would OR together in your search as they are the same search component with different values.
  • The Lexicon is a component. Note: Using two Lexicon entries in the same search would be the same search component with different values, and would OR together in your search. Using a Lexicon entry with another item (for example, Exploit Lexicon entry and the User Entity Search) would AND together in the search.
  • The Free Text field (type-in space in the search bar) is a component but has a key difference than the ones above—while it is a search component, each Free Text field acts indepedently of other Free Text fields. This means that two Free Text fields (for example, two Keyword Search Blocks) in the same search will AND together. Using keywords or clauses in the free text field with another item below would AND together in the search.

Here are examples of using different search components together:

  • Search Bar Free Text, Lexicon Paste Entry in the same search—AND
  • Entity Search (Cryptocurrency), Search Bar Free Text in the same search—AND
  • Hacking Keywords Search Block, Exclude Social Media Search Block—AND
  • Lexicon Market Entry, Lexicon Forum Entry in same search—OR
  • Network (Tor), Network (Discord) in the same search—OR
  • Entity Search (Email), Entity Search (IP) in the same search—OR