Skip to content

threatHunts

List of Threat Hunts.

Arguments

Argument Type Description
first Int Returns the first n elements from the list.
after String An opaque cursor returned from a previous query's endCursor field. Pass this value verbatim to retrieve the next page of results.
last Int Returns the last n elements from the list.
before String An opaque cursor returned from a previous query's startCursor field. Pass this value verbatim to retrieve the previous page of results.
beginTime DateTime Filters results that started after this time.
endTime DateTime Filters results that started before this time.
clusterUuidFilter [String!] Optional list of Rubrik cluster UUIDs to filter by.
statusFilter [ThreatHuntStatus!] Optional status to filter by.
matchesFoundFilter [ThreatHuntMatchesFound!] Optionally filter by if the hunt had any matches.
quarantinedMatchesFilter [ThreatHuntQuarantinedMatchType!] Optionally filter hunts based on whether they have quarantined matches.

Returns

ThreatHuntConnection!

Sample

query {
  threatHunts(first: 10) {
    nodes {
      huntId
      huntType
      name
      startTime
      status
    }
    pageInfo {
      hasNextPage
      endCursor
    }
  }
}

{}

{
  "data": {
    "threatHunts": {
      "nodes": [
        [
          {
            "huntId": "example-string",
            "huntType": "THREAT_HUNT_V1",
            "name": "example-string",
            "startTime": "2024-01-01T00:00:00.000Z",
            "status": "ABORTED"
          }
        ]
      ],
      "pageInfo": {
        "endCursor": "example-string",
        "hasNextPage": true,
        "hasPreviousPage": true,
        "startCursor": "example-string"
      }
    }
  }
}