← Back to BrewedIntel
otherlow

Jan 28, 2026 • GreyNoise Blog

GreyNoise Introduces Recall: Time-Series Intelligence for GreyNoise Query Language (GNQL)

GreyNoise has announced a new feature called Recall for its GreyNoise Query Language (GNQL). This update introduces time-series intelligence capabilities,...

Source
GreyNoise Blog
Category
other
Severity
low

Executive Summary

GreyNoise has announced a new feature called Recall for its GreyNoise Query Language (GNQL). This update introduces time-series intelligence capabilities, allowing customers to query historical data over specific ranges rather than relying on static summaries of current IP behavior. The functionality enables security teams to analyze scanner activity patterns at any given hour in the past. This article does not identify specific threat actors, malware families, or active campaigns. Consequently, there are no immediate threats to mitigate or adversarial tactics to report. The impact is operational, enhancing visibility for defenders using the GreyNoise platform. Security teams utilizing GreyNoise can leverage this update to improve historical analysis of noise versus signal in their network traffic. No actionable threat intelligence regarding malicious entities is contained within this announcement. It serves purely as a vendor product update.

Summary

Recall is a time-series capability that enables customers to query GreyNoise data over specific historical ranges. Instead of a static summary of current IP behavior, Recall allows you to see exactly how scanner activity looked at any given hour.

Published Analysis

GreyNoise has announced a new feature called Recall for its GreyNoise Query Language (GNQL). This update introduces time-series intelligence capabilities, allowing customers to query historical data over specific ranges rather than relying on static summaries of current IP behavior. The functionality enables security teams to analyze scanner activity patterns at any given hour in the past. This article does not identify specific threat actors, malware families, or active campaigns. Consequently, there are no immediate threats to mitigate or adversarial tactics to report. The impact is operational, enhancing visibility for defenders using the GreyNoise platform. Security teams utilizing GreyNoise can leverage this update to improve historical analysis of noise versus signal in their network traffic. No actionable threat intelligence regarding malicious entities is contained within this announcement. It serves purely as a vendor product update. Recall is a time-series capability that enables customers to query GreyNoise data over specific historical ranges. Instead of a static summary of current IP behavior, Recall allows you to see exactly how scanner activity looked at any given hour. Recall is a time-series capability that enables customers to query GreyNoise data over specific historical ranges. Instead of a static summary of current IP behavior, Recall allows you to see exactly how scanner activity looked at any given hour.