Recognition Modes

Choose Your Mode

There are four ways to harness the power of Polarity. Choose the mode that’s right for you either from within the main window, the Polarity Overlay or via the Polarity icon in the system tray.

1. On-Demand Only -- Real-time recognition is off but you can still execute a search in Polarity.

2. Stream -- Polarity will automatically stream information in real-time to the overlay when more context is available.

3. Highlight -- Information is highlighted in real-time. Hover on highlights to get more details.

4. Focus -- Take a screenshot of a section on your screen and lookup any indicators within that section.

On-Demand Only

Force a search when you want it

Users can run On-demand searches regardless of what recognition mode is being used. In this mode entities will not be highlighted when recognized.

There are three ways that you can use the Polarity On-Demand Only mode:

1. Shortcut keys - Select/Highlight the text you want to obtain more context on press and hold Ctrl + C (or CMD + C (Hold) for macOS) for about 2 seconds. This will run an On-Demand query against all integrations and channels within Polarity.

2. Search My Clipboard - You can also right click anywhere within Polarity (or select the Search My Clipboard option from any Polarity menu). Clicking Search My Clipboard will take any data that is already on your clipboard and run a query against all integrations and channels within Polarity.

3. Focus Mode - To Activate Focus Mode, use the keyboard shortcut CTRL + Alt + A. Your mouse cursor will transform into a green pointer to indicate that Focus Mode has been activated. Click down on your left mouse button and drag your mouse over the area of your screen that you want the on-demand search to be run on then release the button when done.

The default way to perform an On-Demand search when using Polarity Client versions prior to version 3.4 is as follows:

• Select/Highlight the text you want to obtain more context around and hold CTRL + C (or CMD + C for MacOS) and then press SHIFT.

Focus Mode

Focus mode allows you to run an on-demand search by drawing a box around the area of your screen that you want Polarity to return results for. This mode is particularly useful as it enables you to harness the power of Polarity’s on-demand mode even when not being able to interact with the data on your screen!

Further tweaks to how Focus Mode works for you can be made in Recognition Settings.

QR Code Recognition

With our latest 5.2.2 release analysts can now utilize our QR code recognition feature within Focus Mode. Is all an analyst has to do is trigger Focus mode either through the button or with the shortcut key and then draw the reticule over a QR code.

The analyst will then get any information on urls, domains, IPS and more that are contained within that QR Code. Enabling analysts to quikly triage QR codes now to determine if there is any nefarious occurring within the QR code.

QR Codes in Action

Stream

Automated search while you work

Polarity automatically streams contextual information into the Polarity Overlay based on the content of your active application.

Highlight

Highlighted search while you work

Polarity highlights keywords in your active application. You can mouse-over highlighted keywords to populate the Polarity Overlay with related contextual information.

Switching between On-Demand, Highlight and Stream modes.

There are three different ways to switch between the On-demand, Stream and Highlight modes.

Windows

The Overlay Window

Select your mode of choice by clicking on one of the three toggles at the top of the of the Polarity Overlay window.

See Common Terminologies Used for more info on system trays and menu bars.

MacOS

The Overlay Window

Select your mode of choice by clicking on one of the three toggles at the top of the of the Polarity Overlay window.

See Common Terminologies Used for more info on system trays and menu bars.

Linux

The Overlay Window

Select your mode of choice by clicking on one of the three toggles at the top of the of the Polarity Overlay window.

See Common Terminologies Used for more info on system trays and menu bars.

Users can also choose to run both the Highlight and Stream modes at the same time. For more info on how to do this see Simultaneously Run Stream and Highlight.