threatMonitoringMatchedObjects

List of matched objects for Threat Monitoring.

Arguments

Argument	Type	Description
first	Int	Returns the first n elements from the list.
after	String	An opaque cursor returned from a previous query's endCursor field. Pass this value verbatim to retrieve the next page of results.
last	Int	Returns the last n elements from the list.
before	String	An opaque cursor returned from a previous query's startCursor field. Pass this value verbatim to retrieve the previous page of results.
beginTime	DateTime	Filters results that started after this time. Unset means no lower bound, except for accounts with DTA dashboard enhancements enabled, where it is required and its absence returns an error.
endTime	DateTime	Filters results that started before this time.
clusterUuidFilter	[String!]	Optional list of Rubrik cluster UUIDs to filter by.
objectTypeFilter	[String!]	Optional list of object types to filter by. Should be of type ManagedObjectType.
workloadNameSearch	String	Optional object name search filter with partial match.
matchTypeFilter	[IndicatorOfCompromiseKind!]	Filters by the type of match.
severityFilter	[MatchSeverity!]	Filters according to the severity of the match.
muteStatusFilter	ThreatMonitoringMuteStatusFilter	Filter by whether the matched object is muted for Threat Monitoring notifications. Unset/UNSPECIFIED applies no filter.

Returns

ThreatMonitoringMatchedObjectConnection!

Sample

QueryVariablesExample Response

query {
  threatMonitoringMatchedObjects(first: 10) {
    nodes {
      filesMatched
      lastDetection
      matchType
      objectFid
      objectName
      objectType
      severity
    }
    pageInfo {
      hasNextPage
      endCursor
    }
  }
}

{}

{
  "data": {
    "threatMonitoringMatchedObjects": {
      "nodes": [
        [
          {
            "filesMatched": 0,
            "lastDetection": "2024-01-01T00:00:00.000Z",
            "matchType": [
              "IOC_FILE_PATTERN"
            ],
            "objectFid": "00000000-0000-0000-0000-000000000000",
            "objectName": "example-string",
            "objectType": "ACTIVE_DIRECTORY_DOMAIN"
          }
        ]
      ],
      "pageInfo": {
        "endCursor": "example-string",
        "hasNextPage": true,
        "hasPreviousPage": true,
        "startCursor": "example-string"
      }
    }
  }
}