threatObservables

A valid Incident Orchestration license is required for this resource

A list of threatObservables
@filterable @paginatable @sortable

Arguments

after (ID)
before (ID)
filter (ThreatObservable_filter)
first (Int)
last (Int)
skip (Int)
sort ([ThreatObservable_sort])

Return fields

_id (ID!)

ID

createdAt (Date)

When was this created?

fileHash (String)

File hash (SHA256) of threatObservable, if applicable

ip (String)

IP address of threatObservable, if applicable

linkUrl (String)

Url address of threatObservable, if applicable

organization (Organization)

Organization where this observable was spotted

threat (Threat)

Threat of which this ThreatObservable is part of

updatedAt (Date)

When was this last updated?