ThreatMetaData
A valid Incident Orchestration license is required for this resource
Metadata about the threats in the incident
Fields
likelyTargetEntity (
LikelyTargetEntity!)
What entity do the threats target
phishReportCount (
Int!)
How many threats are reported as phishing
reportCountFromInbox (
Int!)
How many threats have been reported from the inbox (as Spam or Phishing)
resources (
ThreatResources!)
Aggregated information about the resources in the threats of the incident
threatCount (
Int!)
How many threats the incident has
threatIndicators (
[ThreatIocMaliciousFlag!]!)
All threat indicators in threats (set union)
userActions (
[UserAction!]!)
All user actions in threats (set union)
vipReportCount (
Int!)
How many threats are reported by VIPs