Skip to content

startBulkThreatHunt

Start a new bulk threat hunt.

Arguments

Argument Type Description
input (required) StartThreatHuntV2Input! Configuration to start a threat hunt.

Returns

StartBulkThreatHuntReply!

Sample

mutation StartBulkThreatHunt($input: StartThreatHuntV2Input!) {
  startBulkThreatHunt(input: $input)
}
{
  "input": {
    "baseConfig": {
      "ioc": {},
      "name": "example-string",
      "threatHuntType": "THREAT_HUNT_V1"
    },
    "objectFids": [
      "00000000-0000-0000-0000-000000000000"
    ]
  }
}
{
  "data": {
    "startBulkThreatHunt": {
      "hunts": [
        {
          "huntId": "00000000-0000-0000-0000-000000000000",
          "huntName": "example-string",
          "status": "HUNT_TRIGGER_FAILED"
        }
      ]
    }
  }
}