Use time as component for building query

For a specific detection use case I would like to create a detection but only alert between certain hours, I was looking in the LEQL documentation but I couldn’t find any components related to time for building this query. Does anyone know if this is possible, or what would be the most efficient way?

This may not be the most efficient way, but something like this might work (assuming you are using a timestamp field in the RFC3339 or ISO8601 format). The example below should return everything between 09:00:00:00 and 10:59:59.99

where(“timestamp” = /.T09./ or “timestamp” = /.T10./)