- sessionActivities
Return type
Inventoryquery inventoryCategories {
inventoryCategories {
categories {
__typename
# ...InventoryCategoryFragment
}
}
}{ "data": { "categories": [ { "__typename": "InventoryCategory" } ] } }
Return type
[String!]!The String scalar type represents textual data, represented as UTF-8 character sequences. The String type is most often used by GraphQL to represent free-form human-readable text.
query listToolTypes {
listToolTypes
}{ "data": [ "Example String" ] }
Arguments
Return type
[Toolquery topToolByExternalType(
$limit: Int
$before: DateTime
$after: DateTime
) {
topToolByExternalType(
limit: $limit
before: $before
after: $after
) {
type
count
}
}{ "limit": 40, "before": "Example Custom Scalar", "after": "Example Custom Scalar" }
{ "data": [ { "type": "Example String", "count": 40 } ] }
Return type
[String!]!The String scalar type represents textual data, represented as UTF-8 character sequences. The String type is most often used by GraphQL to represent free-form human-readable text.
query listDataSourceTypes {
listDataSourceTypes
}{ "data": [ "Example String" ] }
Return type
[String!]!The String scalar type represents textual data, represented as UTF-8 character sequences. The String type is most often used by GraphQL to represent free-form human-readable text.
query listChannelTypes {
listChannelTypes
}{ "data": [ "Example String" ] }
Arguments
Return type
[Sessionquery sessionActivities($sessionId: ID!) {
sessionActivities(sessionId: $sessionId) {
id
type
timestamp
agent {
__typename
# ...AgentFragment
}
message
policy {
__typename
# ...PolicyFragment
}
issue {
__typename
# ...IssueFragment
}
}
}{ "sessionId": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4" }
{ "data": [ { "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "type": "SESSION", "timestamp": "Example Custom Scalar", "agent": { "__typename": "Agent" }, "message": "Example String", "policy": { "__typename": "Policy" }, "issue": { "__typename": "Issue" } } ] }
Arguments
Return type
[Session!]!Detections that were created as part of the session
Violations that were created as part of the session.
query sessions(
$filter: SessionFilter
$orderBy: [SessionOrderByInput!]
$limit: Int
$offset: Int
) {
sessions(
filter: $filter
orderBy: $orderBy
limit: $limit
offset: $offset
) {
type
timestamp
agent {
__typename
# ...AgentFragment
}
message
sessionId
detections {
__typename
# ...DetectionFragment
}
violations {
__typename
# ...ViolationPreviewFragment
}
}
}{ "filter": { "sessionId": { "__typename": "StringFilter" }, "activityType": { "__typename": "ActivityTypeFilter" }, "dateRange": { "__typename": "DateTimeFilter" }, "agent": { "__typename": "AgentReferenceFilter" }, "search": "Example String", "findingType": { "__typename": "FindingTypeFilter" }, "issue": { "__typename": "IssueReferenceFilter" }, "detections": { "__typename": "DetectionFilter" }, "tool": { "__typename": "ToolReferenceFilter" }, "dataSource": { "__typename": "DataSourceReferenceFilter" }, "accessChannel": { "__typename": "AccessChannelReferenceFilter" } }, "orderBy": [ { "field": "TIMESTAMP", "direction": "ASC" } ], "limit": 40, "offset": 40 }
{ "data": [ { "type": "SESSION", "timestamp": "Example Custom Scalar", "agent": { "__typename": "Agent" }, "message": "Example String", "sessionId": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "detections": [ { "__typename": "Detection" } ], "violations": [ { "__typename": "ViolationPreview" } ] } ] }
Arguments
Return type
Int!The Int scalar type represents non-fractional signed whole numeric values. Int can represent values between -(2^31) and 2^31 - 1.
query sessionsCount($filter: SessionFilter) {
sessionsCount(filter: $filter)
}{ "filter": { "sessionId": { "__typename": "StringFilter" }, "activityType": { "__typename": "ActivityTypeFilter" }, "dateRange": { "__typename": "DateTimeFilter" }, "agent": { "__typename": "AgentReferenceFilter" }, "search": "Example String", "findingType": { "__typename": "FindingTypeFilter" }, "issue": { "__typename": "IssueReferenceFilter" }, "detections": { "__typename": "DetectionFilter" }, "tool": { "__typename": "ToolReferenceFilter" }, "dataSource": { "__typename": "DataSourceReferenceFilter" }, "accessChannel": { "__typename": "AccessChannelReferenceFilter" } } }
{ "data": 40 }
Arguments
Return type
Activitiesquery activitiesTimelineChart($input: TimelineQueryInput!) {
activitiesTimelineChart(input: $input) {
metadata {
__typename
# ...TimelineQueryMetadataFragment
}
bins {
__typename
# ...ActivitiesTimelineBinFragment
}
totalActivities
totalIndicators
}
}{ "input": { "timeRange": { "__typename": "DateTimeFilter" }, "binCount": 40, "timezone": "Example String", "filters": { "__typename": "SessionFilter" } } }
{ "data": { "metadata": { "__typename": "TimelineQueryMetadata" }, "bins": [ { "__typename": "ActivitiesTimelineBin" } ], "totalActivities": 40, "totalIndicators": 40 } }
Arguments
Return type
Detectionsquery detections($limit: Int, $offset: Int) {
detections(limit: $limit, offset: $offset) {
items {
__typename
# ...DetectionFragment
}
total
}
}{ "limit": 40, "offset": 40 }
{ "data": { "items": [ { "__typename": "Detection" } ], "total": 40 } }
Arguments
Return type
DetectionUse 'messages' field instead for typed message access
query detection($id: ID!) {
detection(id: $id) {
id
title
type
detectedAt
issue {
__typename
# ...IssueFragment
}
session {
__typename
# ...SessionFragment
}
activities {
__typename
# ...AuditEventFragment
}
agent {
__typename
# ...AgentFragment
}
description
}
}{ "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4" }
{ "data": { "id": "9cfb1c81-4c79-452f-b1f5-8ee6571276b4", "title": "Example String", "type": "PII_LEAKAGE", "detectedAt": "Example Custom Scalar", "issue": { "__typename": "Issue" }, "session": { "__typename": "Session" }, "activities": [ { "__typename": "AuditEvent" } ], "agent": { "__typename": "Agent" }, "description": "Example String" } }