Practical Polarity Use Cases

Polarity Practical Exercises

Prepare

Step 1

Place your Overlay Window over the right side of this page.

Step 2

Scroll down through each example and follow the directions given.

SIEM

Polarity is designed to augment your workflow, no matter which application you are viewing.

This example showcases how Polarity can augment your workflow when looking at information in a SIEM or other data aggregator.

Step 1

Select all of the text from the SIEM example area below and

1. Hold CTRL + C (Command + C for macOS)

   or

2. Copy the text to your system clipboard, right click in the Polarity Overlay Window, and select “Search my Clipboard”.

Step 2

You should now see results from your subscribed Integrations in the Polarity Overlay Window!

Optional Step

If you would like to try Polarity On-Screen recognition:

1. Click on either Stream or Highlight Mode in your Polarity Overlay Window.

2. Click back into this window.

3. Scroll back up to the SIEM example, and watch Polarity start highlighting data it recognizes!

Endpoint

This example showcases how Polarity can augment your workflow when you are viewing information in an Endpoint Protection System.

Step 1

Select all of the text from the Endpoint example area below and

1. Hold CTRL + C (Command + C for macOS)

   or

2. Copy the text to your system clipboard, right click in the Polarity Overlay Window, and select “Search my Clipboard”.

Step 2

You should now see results from your subscribed Integrations in the Polarity Overlay Window!

Optional Step

If you would like to try Polarity On-Screen recognition:

1. Click on either Stream or Highlight Mode in your Polarity Overlay Window.

2. Click back into this window.

3. Scroll back up to the Endpoint example, and watch Polarity start highlighting data it recognizes!

Ticketing

This example showcases how Polarity can augment your workflow when viewing information in a Ticketing product.

Step 1

Select all of the text from the Ticketing example area below and

1. Hold CTRL + C (Command + C for macOS)

   or

2. Copy the text to your system clipboard, right click in the Polarity Overlay Window, and select “Search my Clipboard”.

Sender: helpdesk@msdn-update[.]com
Recipient: jane@yourcompany[.]com
Sender IP: 198.54.117[.]198
Domain: msdn-update[.]com
Recipient Internal IP: 10.10.240.17
Attachment:
crashreporter.exe
Hashes:
MD5 a20722e4bd3a6a35c8dfbb99f2cad8c0
SHA-1 8eef1361b6f8a464fc7170deaebac07dd5d681c6
SHA-256 7e8e748f39b0bff7dd70eee3c1d08241565c07ce9bfe687c18ee727cfb2bc5cf

Step 2

You should now see results from your subscribed Integrations in the Polarity Overlay Window!

Optional Step

If you would like to try Polarity On-Screen recognition:

1. Click on either Stream or Highlight Mode in your Polarity Overlay Window.

2. Click back into this window.

3. Scroll back up to the Endpoint example, and watch Polarity start highlighting data it recognizes!

Focus Mode

Sometimes, the text is not directly accessible even though you can see it on your monitor, such as shared screen data in a meeting, a remote VDI session, or when it’s embedded in a picture.

This example showcases how Polarity can augment your workflow by running an On-Demand Search over text that is not directly accessible.

Step 1

Click on the "Focus" button in the top window bar of the Overlay Window.

Step 2

Draw a box around the picture of a list of hashes below.

Step 3

You should now see results from your subscribed Integrations in the Polarity Overlay Window!

What's next?

• Back to Training Center

• Get the Browser Plugin