Organization

Organization

Implements

Connections

incidentsConnection (IncidentConnection!)

A valid Incident Orchestration license is required for this resource

Incidents for the organization @filterable @sortable @paginatable

Argument Type Description
after ID
before ID
filter Incident_filter
first Int
last Int
search String
skip Int
sort [Incident_sort]
managersConnection (UserConnection!)

Managers for the organization with pagination and search support @filterable @sortable @paginatable

Argument Type Description
after ID
before ID
filter User_filter
first Int
last Int
search String
skip Int
sort [User_sort]
manualPhishingCampaigns (ManualPhishingCampaignConnection!)

Manual phishing campaigns (BENCHMARK and ACTIVATION) for the organization. Alias for manualCampaigns excluding communication campaigns. @filterable @sortable @paginatable

Argument Type Description
after ID
before ID
filter PhishingCampaign_filter
first Int
last Int
skip Int
sort [PhishingCampaign_sort]
questsConnection (QuestConnection!)

Quests @filterable @sortable @paginatable

Argument Type Description
after ID
before ID
filter Quest_filter
first Int
last Int
skip Int
sort [Quest_sort]
threatsConnection (ThreatConnection!)

A valid Incident Orchestration license is required for this resource

Threats for the organization @filterable @sortable @paginatable

Argument Type Description
after ID
before ID
filter Threat_filter
first Int
last Int
search String
skip Int
sort [Threat_sort]
userTrainingPackageCompletionsConnection (UserTrainingPackageConnection)

Users' progress records for one training package, updated in real time. With passedOnly, lists users who have passed the training package at some point, including users who have since restarted it, and completedSince filters on the completion time of their best passing attempt. Without it, lists users whose current attempt is completed, and completedSince filters on the completion time of that attempt. @filterable @paginatable

Argument Type Description
after ID
before ID
completedSince Date
filter UserTrainingPackage_filter
first Int
last Int
passedOnly Boolean!

The default value is false.
skip Int
trainingPackageId ID!

Fields

_id (ID!)

Id

analytics (OrganizationAnalytics)
contract (OrganizationContract!)

Organization tier, modules and user licenses

createdAt (Date)

When org was created at

incidentRules ([IncidentRule!]!)

A valid Incident Orchestration license is required for this resource

Incident rules for running actions on new incidents @filterable @sortable @paginatable

Argument Type Description
after ID
before ID
filter IncidentRule_filter
first Int
last Int
skip Int
sort [IncidentRule_sort]
incidentTags ([IncidentTag!]!)

A valid Incident Orchestration license is required for this resource

Incident tags for the organization

incidents ([Incident])
Deprecation notice

Use incidentsConnection

A valid Incident Orchestration license is required for this resource

Threatborne incidents created for organization @filterable @sortable @paginatable

Argument Type Description
after ID
before ID
filter Incident_filter
first Int
last Int
search String
skip Int
sort [Incident_sort]
name (String!)

Name of the organization e.g. HoxHunt

simulationSenderDomains ([SimulationSenderDomain!]!)

Simulation sender domains for organization email allowlisting

threats ([Threat])
Deprecation notice

Use threatsConnection

A valid Incident Orchestration license is required for this resource

Threats reported by org users @filterable @sortable @paginatable

Argument Type Description
after ID
before ID
filter Threat_filter
first Int
last Int
skip Int
sort [Threat_sort]
updatedAt (Date)

When org was updated at

userCustomAttributeDefinitions (OrgUserCustomAttributeDefinitions)

List of custom attribute definitions

users ([User!]!)

Users for the organization @filterable @sortable @paginatable

Argument Type Description
after ID
before ID
filter User_filter
first Int
last Int
search String
skip Int
sort [User_sort]