OBJECT

ThreatHuntingObjectFileMatch

Description

Data for a matched file.

link GraphQL Schema definition

  • type ThreatHuntingObjectFileMatch {
  • # Time at which the file was created in the system.
  • createdTime: DateTime
  • # Earliest snapshot date containing a match.
  • earliestMatchedSnapshotDate: DateTime
  • # Matched file name.
  • filename: String!
  • # Matched filepath.
  • filepath: String!
  • # IOCs matching the file.
  • iocDetails: [ThreatHuntIocDetails!]!
  • # Specifies if the file is quarantined.
  • isQuarantinedInFirstObservedSnapshot: Boolean!
  • # Latest snapshot date containing a match.
  • latestMatchedSnapshotDate: DateTime
  • # Latest snapshot date not containing a match.
  • latestSnapshotWithoutMatchDate: DateTime
  • # ID of the matched file being returned.
  • matchId: Long!
  • # MD5 hash of the matched file.
  • matchedFileMd5: String!
  • # SHA1 hash of the matched file.
  • matchedFileSha1: String!
  • # SHA256 hash of the matched file.
  • matchedFileSha256: String!
  • # Information about the snapshots where the file was matched.
  • matchedSnapshots: [MatchedSnapshot!]!
  • # Time at which the file was last modified in the system.
  • modifiedTime: DateTime
  • # Total number of snapshots that included the matched file.
  • totalSnapshotsMatched: Long!
  • # Total snapshots where the file was scanned.
  • totalSnapshotsScanned: Long!
  • }

link Require by