Skip to content

EnableThreatMonitoringInput

Request to enable/disable Threat Monitoring for a single entity or a batch of entities.

Fields

Field Type Description
isBatchEnabled Boolean Whether to enable or disable the batch of entities.
isSmartScanningEnabled Boolean Indicates whether extended file scan coverage is applied uniformly across the batch. Supported for cloud-native roots and Rubrik clusters only.
isYaraProcessingEnabled Boolean When set, applies the YARA-based threat monitoring toggle to the batch of CLOUD_NATIVE_ROOT entities. Omit to leave YARA state unchanged.
rootIds [UUID!] List of entity root ids to batch enable/disable.
shouldScanAllFiles Boolean When true, threat monitoring scans all files regardless of extension. Cloud workloads only.
status ThreatMonitoringEnablementStatusInput Entity to point enable/disable.