TABLE file.ctime as "Created", tags as "Tags"FROM "New Notes"WHERE contains(tags, "windows") OR contains(tags, "lateral-movement") OR contains(tags, "authentication") OR contains(tags, "active-directory")SORT file.ctime DESC
windows
TABLE file.ctime as "Created", tags as "Tags"FROM "New Notes"WHERE contains(tags, "windows")SORT file.ctime DESC
lateral-movement
TABLE file.ctime as "Created", tags as "Tags"FROM "New Notes"WHERE contains(tags, "lateral-movement")SORT file.ctime DESC
authentication
TABLE file.ctime as "Created", tags as "Tags"FROM "New Notes"WHERE contains(tags, "authentication")SORT file.ctime DESC
active-directory
TABLE file.ctime as "Created", tags as "Tags"FROM "New Notes"WHERE contains(tags, "active-directory")SORT file.ctime DESC