Skip to content

snapshotsSecurityInfo

Returns security information (anomaly, malware, quarantine) for snapshots of the given workloads.

Arguments

Argument Type Description
first Int Returns the first n elements from the list.
after String An opaque cursor returned from a previous query's endCursor field. Pass this value verbatim to retrieve the next page of results.
last Int Returns the last n elements from the list.
before String An opaque cursor returned from a previous query's startCursor field. Pass this value verbatim to retrieve the previous page of results.
workloadIds (required) [UUID!]! List of workload IDs for which to retrieve snapshot security information.
startTime DateTime Optional filter to consider only snapshots at or after this time.
endTime DateTime Optional filter to consider only snapshots at or before this time.
sortOrder SortOrder Sort order based on timestamp.
includeThreatHunts Boolean Include threat hunt information in results.

Returns

SnapshotSecurityInfoConnection!

Sample

query SnapshotsSecurityInfo($workloadIds: [UUID!]!) {
  snapshotsSecurityInfo(
    workloadIds: $workloadIds
    first: 10
  ) {
    nodes {
      anomalyConfidence
      date
      hasMalware
      isAnomaly
      isQuarantined
      snapshotId
      suspiciousFileCount
      workloadId
    }
    pageInfo {
      hasNextPage
      endCursor
    }
  }
}

{
  "workloadIds": [
    "00000000-0000-0000-0000-000000000000"
  ]
}

{
  "data": {
    "snapshotsSecurityInfo": {
      "nodes": [
        [
          {
            "anomalyConfidence": "CONFIDENCE_UNSPECIFIED",
            "date": "2024-01-01T00:00:00.000Z",
            "hasMalware": true,
            "isAnomaly": true,
            "isQuarantined": true,
            "snapshotId": "00000000-0000-0000-0000-000000000000"
          }
        ]
      ],
      "pageInfo": {
        "endCursor": "example-string",
        "hasNextPage": true,
        "hasPreviousPage": true,
        "startCursor": "example-string"
      }
    }
  }
}