OBJECT

ThreatHuntResultObjectsSummary

Description

Summary of a threat hunt for an object.

link GraphQL Schema definition

  • type ThreatHuntResultObjectsSummary {
  • # Total unique paths for which malware was found.
  • totalUniqueMatchedPaths: Long!
  • # Total paths for which malware was found.
  • totalMatchedPaths: Long!
  • # List of indicators of compromise (IOCs) found in all the matches.
  • matchTypes: [IndicatorOfCompromise!]!
  • # Earliest snapshot date containing a match.
  • earliestMatchedSnapshotDate: DateTime
  • # Latest snapshot date containing a match.
  • latestMatchedSnapshotDate: DateTime
  • # Latest snapshot date not containing a match.
  • latestSnapshotWithoutMatchDate: DateTime
  • # Total snapshots where a match was found.
  • totalMatchedSnapshots: Int!
  • # Rubrik cluster information.
  • clusterInfo: ClusterInfoType
  • # Scan status of the object.
  • objectScanStatus: ThreatHuntObjectStatus!
  • # Specifies whether the object has quarantined matches.
  • hasQuarantinedMatches: Boolean!
  • # Threat hunt summaries for each snapshot.
  • snapshotsStats: [ThreatHuntResultSnapshotStats!]!
  • # The scanned object.
  • object: CdmHierarchySnappableNew
  • # The object location.
  • location: String!
  • }