A SOC analyst needs to retrieve the list of all open phishing incidents in the last 30 days. What is the correct query to use?
-status:closed -category:job type:Phishing created:>="30 days ago"
status:closed -category:jobandtype:Phishing created:>="30 days ago"
-status:closed -category:jobandtype:Phishing created:<="30 days ago"
-status:closed -category:job type:Phishing created:="30 days ago"
Submit