Advanced Investigate query language

[54]

The docs seem a little sparce, is there anything outlining advanced Investigate query language search terms/operators?

Example:

• Looking for Office 365 SharePoint Online site content report
  • 'Site' LIKE  'https://domain.sharepoint.com/sites/somesite/'
• User Risk Type report accross multiple services.
  • RT PCI AND ('User' '[e-mail]') OR ('Mail Owner/Sender' '[e-mail]')

[Chris Hallstrom]

The search bar in Investigate supports operators like AND,OR,NOT as well as organizational () and '' for exact strings. The filters can also help narrow down results.