OBJECT

GetAnomalyDetailsReply

Description

Anomaly analysis report from lambda service.

link GraphQL Schema definition

  • type GetAnomalyDetailsReply {
  • # Activity series id for the events of this anomaly.
  • activitySeriesId: String!
  • # Information about possible ransomware strains.
  • anomalyInfo: AnomalyInfo
  • # The probability of the snapshot being anomalous.
  • anomalyProbability: Float!
  • # Type of the anomaly detected.
  • anomalyType: AnomalyType!
  • # Total new bytes created.
  • bytesCreatedCount: Long!
  • # Total bytes deleted.
  • bytesDeletedCount: Long!
  • # Total bytes modified.
  • bytesModifiedCount: Long!
  • # Net change in the number of bytes. For example, if 5 bytes are added and 3 bytes
  • # deleted, this field returns 2 as the number of bytes that changed.
  • bytesNetChangedCount: Long!
  • # Total suspicious bytes.
  • bytesSuspiciousCount: Long!
  • # The Rubrik cluster of the object.
  • cluster: Cluster!
  • # Time when the anomaly was detected.
  • detectionTime: DateTime
  • # Level of encryption detected.
  • encryption: EncryptionLevel!
  • # The count of new files created.
  • filesCreatedCount: Long!
  • # The count of files deleted.
  • filesDeletedCount: Long!
  • # The count of files modified.
  • filesModifiedCount: Long!
  • # The id of the anomaly.
  • id: String!
  • # Specifies whether the snapshot is anomalous.
  • isAnomaly: Boolean!
  • # The location of the object.
  • location: String!
  • # The internal managed ID of the object.
  • managedId: String!
  • # The type of the object.
  • objectType: ObjectTypeEnum
  • # The list of directories that can be snoozed from the anomaly.
  • potentialSnoozedDirectories: [String!]!
  • # The previous snapshot.
  • previousSnapshot: CdmSnapshot
  • # The date of the previous snapshot.
  • previousSnapshotDate: DateTime
  • # The FID of the previous snapshot.
  • previousSnapshotFid: String!
  • # The ID of the previous snapshot.
  • previousSnapshotId: String!
  • # The ransomware analysis result, including encryption.
  • ransomwareResult: RansomwareResult
  • # Specifies the resolution status of the anomaly.
  • resolutionStatus: ResolutionStatus!
  • # Severity of the anomaly.
  • severity: ActivitySeverityEnum!
  • # The analyzed snapshot.
  • snapshot: CdmSnapshot
  • # The date of the snapshot.
  • snapshotDate: DateTime
  • # The internal FID of the snapshot.
  • snapshotFid: String!
  • # The internal ID of the snapshot.
  • snapshotId: String!
  • # Total number of suspicious files.
  • suspiciousFilesCount: Long!
  • # The internal FID of the object.
  • workloadFid: String!
  • # The internal ID of the object.
  • workloadId: String!
  • # The name of the object.
  • workloadName: String!
  • }

link Require by