| Keys | Action |
|---|
| Ctrl K or ⌘ K | Search everything: hosts, alerts, cases, users, pages, commands. |
| ? | Show the shortcuts for the current page. |
| g then o | Go to Overview. |
| g then a | Go to Alerts. |
| g then l | Go to Logs. |
| g then c | Go to Cases. |
| g then h | Go to Hosts. |
| g then d | Go to Detections. |
| Esc | Close the drawer, menu or dialog. |
| Keys | Action |
|---|
| j / k | Next / previous row. |
| o or Enter | Open the selected row. |
| x | Select the row for a bulk action. |
| f | Filter on the selected value. |
| t | Change the time range. |
| / | Focus the search or query bar. |
| Keys | Action |
|---|
| Ctrl F | Find in results without re-running the query. |
| e | Expand or collapse the selected document. |
| c | Copy the selected document as JSON. |
| Keys | Action |
|---|
| a | Assign to me. |
| s | Change stage. |
| n | Add a note. |
| e | Escalate to case. |
