Incident_filter
Input Fields
AND (
[Incident_filter]
)
OR (
[Incident_filter]
)
_id_eq (
ID
)
_id_exists (
Boolean
)
_id_gt (
ID
)
_id_gte (
ID
)
_id_in (
[ID]
)
_id_lt (
ID
)
_id_lte (
ID
)
_id_ne (
ID
)
_id_nin (
[ID]
)
createdAt_eq (
Date
)
createdAt_exists (
Boolean
)
createdAt_gt (
Date
)
createdAt_gte (
Date
)
createdAt_in (
[Date]
)
createdAt_lt (
Date
)
createdAt_lte (
Date
)
createdAt_ne (
Date
)
createdAt_nin (
[Date]
)
escalation__creationThreshold_eq (
Int
)
escalation__creationThreshold_exists (
Boolean
)
escalation__creationThreshold_gt (
Int
)
escalation__creationThreshold_gte (
Int
)
escalation__creationThreshold_in (
[Int]
)
escalation__creationThreshold_lt (
Int
)
escalation__creationThreshold_lte (
Int
)
escalation__creationThreshold_ne (
Int
)
escalation__creationThreshold_nin (
[Int]
)
escalation__escalatedAt_eq (
Date
)
escalation__escalatedAt_exists (
Boolean
)
escalation__escalatedAt_gt (
Date
)
escalation__escalatedAt_gte (
Date
)
escalation__escalatedAt_in (
[Date]
)
escalation__escalatedAt_lt (
Date
)
escalation__escalatedAt_lte (
Date
)
escalation__escalatedAt_ne (
Date
)
escalation__escalatedAt_nin (
[Date]
)
firstReportedAt_eq (
Date
)
firstReportedAt_exists (
Boolean
)
firstReportedAt_gt (
Date
)
firstReportedAt_gte (
Date
)
firstReportedAt_in (
[Date]
)
firstReportedAt_lt (
Date
)
firstReportedAt_lte (
Date
)
firstReportedAt_ne (
Date
)
firstReportedAt_nin (
[Date]
)
hasSensitiveInformation_eq (
Boolean
)
hasSensitiveInformation_exists (
Boolean
)
hasSensitiveInformation_ne (
Boolean
)
humanReadableId_eq (
ID
)
humanReadableId_exists (
Boolean
)
humanReadableId_gt (
ID
)
humanReadableId_gte (
ID
)
humanReadableId_in (
[ID]
)
humanReadableId_lt (
ID
)
humanReadableId_lte (
ID
)
humanReadableId_ne (
ID
)
humanReadableId_nin (
[ID]
)
lastReportedAt_eq (
Date
)
lastReportedAt_exists (
Boolean
)
lastReportedAt_gt (
Date
)
lastReportedAt_gte (
Date
)
lastReportedAt_in (
[Date]
)
lastReportedAt_lt (
Date
)
lastReportedAt_lte (
Date
)
lastReportedAt_ne (
Date
)
lastReportedAt_nin (
[Date]
)
organizationId_eq (
ID
)
organizationId_exists (
Boolean
)
organizationId_gt (
ID
)
organizationId_gte (
ID
)
organizationId_in (
[ID]
)
organizationId_lt (
ID
)
organizationId_lte (
ID
)
organizationId_ne (
ID
)
organizationId_nin (
[ID]
)
policyName_eq (
IncidentPolicy
)
policyName_exists (
Boolean
)
policyName_in (
[IncidentPolicy]
)
policyName_ne (
IncidentPolicy
)
policyName_nin (
[IncidentPolicy]
)
remediationJobIds_as_set_eq (
[ID!]
)
remediationJobIds_in (
[ID!]
)
remediationJobIds_nin (
[ID!]
)
remediationJobIds_not_empty (
Boolean
)
severity_eq (
ThreatSeverity
)
severity_exists (
Boolean
)
severity_in (
[ThreatSeverity]
)
severity_ne (
ThreatSeverity
)
severity_nin (
[ThreatSeverity]
)
socClassification_eq (
SocClassification
)
socClassification_exists (
Boolean
)
socClassification_in (
[SocClassification]
)
socClassification_ne (
SocClassification
)
socClassification_nin (
[SocClassification]
)
state_eq (
IncidentState
)
state_exists (
Boolean
)
state_in (
[IncidentState]
)
state_ne (
IncidentState
)
state_nin (
[IncidentState]
)
threatCount_eq (
Int
)
threatCount_exists (
Boolean
)
threatCount_gt (
Int
)
threatCount_gte (
Int
)
threatCount_in (
[Int]
)
threatCount_lt (
Int
)
threatCount_lte (
Int
)
threatCount_ne (
Int
)
threatCount_nin (
[Int]
)
threatMetadata__phishReportCount_eq (
Int
)
threatMetadata__phishReportCount_exists (
Boolean
)
threatMetadata__phishReportCount_gt (
Int
)
threatMetadata__phishReportCount_gte (
Int
)
threatMetadata__phishReportCount_in (
[Int]
)
threatMetadata__phishReportCount_lt (
Int
)
threatMetadata__phishReportCount_lte (
Int
)
threatMetadata__phishReportCount_ne (
Int
)
threatMetadata__phishReportCount_nin (
[Int]
)
threatMetadata__reportCountFromInbox_eq (
Int
)
threatMetadata__reportCountFromInbox_exists (
Boolean
)
threatMetadata__reportCountFromInbox_gt (
Int
)
threatMetadata__reportCountFromInbox_gte (
Int
)
threatMetadata__reportCountFromInbox_in (
[Int]
)
threatMetadata__reportCountFromInbox_lt (
Int
)
threatMetadata__reportCountFromInbox_lte (
Int
)
threatMetadata__reportCountFromInbox_ne (
Int
)
threatMetadata__reportCountFromInbox_nin (
[Int]
)
threatMetadata__resources__hasAttachment_eq (
Boolean
)
threatMetadata__resources__hasAttachment_exists (
Boolean
)
threatMetadata__resources__hasAttachment_ne (
Boolean
)
threatMetadata__resources__hasLink_eq (
Boolean
)
threatMetadata__resources__hasLink_exists (
Boolean
)
threatMetadata__resources__hasLink_ne (
Boolean
)
threatMetadata__threatCount_eq (
Int
)
threatMetadata__threatCount_exists (
Boolean
)
threatMetadata__threatCount_gt (
Int
)
threatMetadata__threatCount_gte (
Int
)
threatMetadata__threatCount_in (
[Int]
)
threatMetadata__threatCount_lt (
Int
)
threatMetadata__threatCount_lte (
Int
)
threatMetadata__threatCount_ne (
Int
)
threatMetadata__threatCount_nin (
[Int]
)
threatMetadata__threatIndicators_as_set_eq (
[ThreatIocMaliciousFlag!]
)
threatMetadata__threatIndicators_in (
[ThreatIocMaliciousFlag!]
)
threatMetadata__threatIndicators_nin (
[ThreatIocMaliciousFlag!]
)
threatMetadata__threatIndicators_not_empty (
Boolean
)
threatMetadata__userActions_as_set_eq (
[UserAction!]
)
threatMetadata__userActions_in (
[UserAction!]
)
threatMetadata__userActions_nin (
[UserAction!]
)
threatMetadata__userActions_not_empty (
Boolean
)
threatMetadata__vipReportCount_eq (
Int
)
threatMetadata__vipReportCount_exists (
Boolean
)
threatMetadata__vipReportCount_gt (
Int
)
threatMetadata__vipReportCount_gte (
Int
)
threatMetadata__vipReportCount_in (
[Int]
)
threatMetadata__vipReportCount_lt (
Int
)
threatMetadata__vipReportCount_lte (
Int
)
threatMetadata__vipReportCount_ne (
Int
)
threatMetadata__vipReportCount_nin (
[Int]
)
updatedAt_eq (
Date
)
updatedAt_exists (
Boolean
)
updatedAt_gt (
Date
)
updatedAt_gte (
Date
)
updatedAt_in (
[Date]
)
updatedAt_lt (
Date
)
updatedAt_lte (
Date
)
updatedAt_ne (
Date
)
updatedAt_nin (
[Date]
)