setIncidentSocClassification
Set soc classification for incident
Input fields
SocClassification!)
String!)
Return fields
ID!)
Id
ThreatClassification)
The classification of the incident, calculated by classifications of the threats and severity
Date)
Created At
IncidentEscalation)
Escalation metadata
Date)
First reported at
Int!)
Count of related threats in the whole hoxhunt network
Boolean)
If incident has sensitive information
ID!)
Id
Date)
Last reported at
[IncidentNote])
Notes left for an incident
Organization!)
Organization that this incident happened in
ID!)
Organization ID
IncidentPolicy!)
Which incident policy created this incident
String!)
Link that can be used to view the incident in the Hoxhunt Respnse UI
[IncidentRuleMatch!]!)
Incident rules that have matched the incident @filterable @sortable
| Argument | Type | Description |
|---|---|---|
filter |
IncidentRuleMatch_filter
|
|
sort |
[IncidentRuleMatch_sort]
|
ThreatSeverity)
Incident severity
SocClassification)
Soc classification
IncidentState!)
Incident of the state, e.g. RESOLVED
Int!)
Count of related threats
ThreatMetaData)
Metadata about the threats in the incident
[Threat]!)
Threats related to the incident @filterable @paginatable @sortable
| Argument | Type | Description |
|---|---|---|
after |
ID
|
|
before |
ID
|
|
filter |
Threat_filter
|
|
first |
Int
|
|
last |
Int
|
|
search |
String
|
|
skip |
Int
|
|
sort |
[Threat_sort]
|
Date)
Updated At