threatHuntingObjectMatchedFiles

List of matched files for an object for a specified threat hunt.

Arguments

Argument	Type	Description
first	Int	Returns the first n elements from the list.
after	String	An opaque cursor returned from a previous query's endCursor field. Pass this value verbatim to retrieve the next page of results.
last	Int	Returns the last n elements from the list.
before	String	An opaque cursor returned from a previous query's startCursor field. Pass this value verbatim to retrieve the previous page of results.
huntId (required)	String!	ID of the threat hunt.
objectFid (required)	UUID!	FID of the object.
filenameSearchFilter	String	Optional filename search.
quarantinedFileMatchFilter	ThreatHuntQuarantinedMatchType	Optionally filter matches based on whether they are quarantined.
threatHuntMatchedFilesSort	ThreatHuntMatchedFilesSort	Sorts threat hunt matched files.

Returns

ThreatHuntingObjectFileMatchConnection!

Sample

QueryVariablesExample Response

query ThreatHuntingObjectMatchedFiles($huntId: String!, $objectFid: UUID!) {
  threatHuntingObjectMatchedFiles(
    huntId: $huntId
    objectFid: $objectFid
    first: 10
  ) {
    nodes {
      archiveRelativePath
      createdTime
      earliestMatchedSnapshotDate
      filename
      filepath
      isInsideArchive
      isQuarantinedInFirstObservedSnapshot
      latestMatchedSnapshotDate
      latestSnapshotWithoutMatchDate
      matchId
      matchedFileMd5
      matchedFileSha1
      matchedFileSha256
      modifiedTime
      totalSnapshotsMatched
      totalSnapshotsScanned
    }
    pageInfo {
      hasNextPage
      endCursor
    }
  }
}

{
  "huntId": "example-string",
  "objectFid": "00000000-0000-0000-0000-000000000000"
}

{
  "data": {
    "threatHuntingObjectMatchedFiles": {
      "nodes": [
        [
          {
            "archiveRelativePath": "example-string",
            "createdTime": "2024-01-01T00:00:00.000Z",
            "earliestMatchedSnapshotDate": "2024-01-01T00:00:00.000Z",
            "filename": "example-string",
            "filepath": "example-string",
            "isInsideArchive": true
          }
        ]
      ],
      "pageInfo": {
        "endCursor": "example-string",
        "hasNextPage": true,
        "hasPreviousPage": true,
        "startCursor": "example-string"
      }
    }
  }
}