This is page 2 of 2. Use http://codebase.md/spathodea-network/opencti-mcp?lines=true&page={x} to view the full context.
# Directory Structure
```
├── .env.example
├── .gitignore
├── Dockerfile
├── LICENSE
├── package.json
├── README.md
├── README.zh-TW.md
├── smithery.yaml
├── src
│ ├── index.ts
│ ├── opencti.graphql
│ └── queries
│ ├── metadata.ts
│ ├── references.ts
│ ├── relationships.ts
│ ├── reports.ts
│ ├── stix_objects.ts
│ ├── system.ts
│ └── users.ts
└── tsconfig.json
```
# Files
--------------------------------------------------------------------------------
/src/opencti.graphql:
--------------------------------------------------------------------------------
```graphql
1 | ### DIRECTIVES
2 |
3 | directive @auth(for: [Capabilities] = [], and: Boolean = false) on OBJECT | FIELD_DEFINITION
4 | directive @public on OBJECT | FIELD_DEFINITION
5 | directive @constraint(
6 | # String constraints
7 | minLength: Int
8 | maxLength: Int
9 | startsWith: String
10 | endsWith: String
11 | notContains: String
12 | pattern: String
13 | format: String
14 |
15 | # Number constraints
16 | min: Int
17 | max: Int
18 | exclusiveMin: Int
19 | exclusiveMax: Int
20 | multipleOf: Int
21 | ) on INPUT_FIELD_DEFINITION
22 |
23 | ### SCALAR
24 |
25 | scalar DateTime
26 | scalar ConstraintString
27 | scalar ConstraintNumber
28 | scalar Upload
29 | scalar StixId
30 | scalar StixRef
31 | scalar Any
32 | scalar JSON
33 | enum State {
34 | wait
35 | progress
36 | complete
37 | timeout
38 | }
39 | enum Capabilities {
40 | CONNECTORAPI
41 | KNOWLEDGE
42 | KNOWLEDGE_KNUPDATE
43 | KNOWLEDGE_KNPARTICIPATE
44 | KNOWLEDGE_KNUPDATE_KNDELETE
45 | KNOWLEDGE_KNUPDATE_KNORGARESTRICT
46 | KNOWLEDGE_KNUPDATE_KNMANAGEAUTHMEMBERS
47 | KNOWLEDGE_KNUPLOAD
48 | KNOWLEDGE_KNASKIMPORT
49 | KNOWLEDGE_KNGETEXPORT
50 | KNOWLEDGE_KNGETEXPORT_KNASKEXPORT
51 | KNOWLEDGE_KNENRICHMENT
52 | EXPLORE
53 | EXPLORE_EXUPDATE
54 | EXPLORE_EXUPDATE_EXDELETE
55 | EXPLORE_EXUPDATE_PUBLISH
56 | INVESTIGATION
57 | INVESTIGATION_INUPDATE
58 | INVESTIGATION_INUPDATE_INDELETE
59 | MODULES
60 | MODULES_MODMANAGE
61 | SETTINGS
62 | SETTINGS_SETPARAMETERS
63 | SETTINGS_SETACCESSES
64 | SETTINGS_SETMARKINGS
65 | SETTINGS_SETLABELS
66 | SETTINGS_SETCUSTOMIZATION
67 | SETTINGS_SECURITYACTIVITY
68 | SETTINGS_FILEINDEXING
69 | SETTINGS_SUPPORT
70 | TAXIIAPI
71 | TAXIIAPI_SETCOLLECTIONS
72 | INGESTION
73 | INGESTION_SETINGESTIONS
74 | CSVMAPPERS
75 | VIRTUAL_ORGANIZATION_ADMIN
76 | }
77 | enum MemberType {
78 | User
79 | Group
80 | Organization
81 | }
82 |
83 | ### RELAY
84 |
85 | type PageInfo {
86 | startCursor: String!
87 | endCursor: String!
88 | hasNextPage: Boolean!
89 | hasPreviousPage: Boolean!
90 | globalCount: Int!
91 | }
92 | enum OrderingMode {
93 | asc
94 | desc
95 | }
96 | enum FilterMode {
97 | and
98 | or
99 | }
100 | enum FilterOperator {
101 | eq
102 | not_eq
103 | lt
104 | lte
105 | gt
106 | gte
107 | match
108 | wildcard
109 | contains
110 | not_contains
111 | ends_with
112 | not_ends_with
113 | starts_with
114 | not_starts_with
115 | script
116 | nil
117 | not_nil
118 | search
119 | }
120 |
121 | # noinspection GraphQLSchemaValidation
122 | input FilterGroup {
123 | mode: FilterMode!
124 | filters: [Filter!]!
125 | filterGroups: [FilterGroup!]!
126 | }
127 | input Filter {
128 | key: [String!]!
129 | values: [Any!]!
130 | operator: FilterOperator
131 | mode: FilterMode
132 | }
133 |
134 | type RepresentativeWithId {
135 | id: String!
136 | value: String
137 | entity_type: String
138 | color: String
139 | }
140 |
141 | type FilterKeysSchema {
142 | entity_type: String!
143 | filters_schema: [FilterDefinitionSchema!]!
144 | }
145 |
146 | type FilterDefinitionSchema {
147 | filterKey: String!
148 | filterDefinition: FilterDefinition!
149 | }
150 |
151 | type FilterDefinition {
152 | filterKey: String!
153 | label: String!
154 | type: String!
155 | multiple: Boolean!
156 | subEntityTypes: [String!]!
157 | elementsForFilterValuesSearch: [String!]!
158 | subFilters: [FilterDefinition!]
159 | }
160 |
161 | ### EDIT
162 |
163 | enum EditOperation {
164 | add
165 | replace
166 | remove
167 | }
168 | input EditInput {
169 | key: String! # Field name to change
170 | object_path: String # Path to apply change (for complex object)
171 | value: [Any]! # Values to apply
172 | operation: EditOperation # Undefined = REPLACE
173 | }
174 | input EditContext {
175 | focusOn: String # Field name
176 | }
177 | type EditUserContext {
178 | name: String!
179 | focusOn: String # Field name
180 | }
181 | input DictionaryInput {
182 | key: String!
183 | value: String!
184 | }
185 | type Dictionary {
186 | key: String!
187 | value: String!
188 | }
189 |
190 | ### INFO
191 |
192 | """
193 | Dependency information containing the name and the deployed version.
194 | """
195 | type DependencyVersion {
196 | name: String!
197 | version: String!
198 | }
199 |
200 | """
201 | NodeJs memory.
202 | https://nodejs.org/api/process.html#process_process_memoryusage
203 | https://nodejs.org/docs/latest-v11.x/api/v8.html#v8_v8_getheapstatistics
204 | """
205 | type AppMemory {
206 | rss: Float
207 | heapTotal: Float
208 | heapUsed: Float
209 | external: Float
210 | arrayBuffers: Float
211 | total_heap_size: Float
212 | total_heap_size_executable: Float
213 | total_physical_size: Float
214 | total_available_size: Float
215 | used_heap_size: Float
216 | heap_size_limit: Float
217 | malloced_memory: Float
218 | peak_malloced_memory: Float
219 | does_zap_garbage: Float
220 | }
221 |
222 | input ExportContext {
223 | entity_id: String
224 | entity_type: String!
225 | }
226 |
227 | type AppDebugDistribution {
228 | label: String!
229 | value: Int
230 | }
231 |
232 | type AppDebugStatistics {
233 | objects: [AppDebugDistribution]
234 | relationships: [AppDebugDistribution]
235 | }
236 |
237 | """
238 | Retrieve the application information version add dependencies
239 | """
240 | type AppInfo {
241 | """
242 | The OpenCTI application version
243 | """
244 | version: String! @auth
245 | """
246 | The OpenCTI api current memory usage
247 | """
248 | memory: AppMemory @auth(for: [SETTINGS_SETPARAMETERS])
249 | """
250 | The list of OpenCTI software dependencies
251 | """
252 | dependencies: [DependencyVersion!]! @auth(for: [SETTINGS_SETPARAMETERS])
253 | """
254 | The objects statistics
255 | """
256 | debugStats: AppDebugStatistics @auth(for: [SETTINGS_SETPARAMETERS])
257 | }
258 |
259 | ### STATS
260 |
261 | type AckDetails {
262 | rate: Float
263 | }
264 | type MessagesStats {
265 | ack: String
266 | ack_details: AckDetails
267 | }
268 | type QueueArguments {
269 | config: String
270 | }
271 | type QueueMetrics {
272 | name: String!
273 | arguments: QueueArguments
274 | messages: String
275 | messages_ready: String
276 | messages_unacknowledged: String
277 | consumers: String
278 | idle_since: DateTime
279 | message_stats: MessagesStats
280 | }
281 | type QueueTotals {
282 | messages: String
283 | messages_ready: String
284 | messages_unacknowledged: String
285 | }
286 | type ObjectTotals {
287 | channels: String
288 | consumers: String
289 | queues: String
290 | }
291 | type OverviewMetrics {
292 | object_totals: ObjectTotals
293 | queue_totals: QueueTotals
294 | message_stats: MessagesStats
295 | }
296 | type RabbitMQMetrics {
297 | consumers: String
298 | queues: [QueueMetrics]
299 | overview: OverviewMetrics
300 | }
301 | type SearchMetrics {
302 | query_total: String
303 | fetch_total: String
304 | }
305 | type IndexingMetrics {
306 | index_total: String
307 | delete_total: String
308 | }
309 | type GetMetrics {
310 | total: String
311 | }
312 | type DocsMetrics {
313 | count: String
314 | }
315 | type ElasticSearchMetrics {
316 | docs: DocsMetrics
317 | search: SearchMetrics
318 | get: GetMetrics
319 | indexing: IndexingMetrics
320 | }
321 | enum StatsOperation {
322 | count
323 | sum
324 | }
325 | type TimeSeries {
326 | date: DateTime!
327 | value: Int!
328 | }
329 | type MultiTimeSeries {
330 | data: [TimeSeries]
331 | }
332 | input AuditsTimeSeriesParameters {
333 | field: String!
334 | types: [String]
335 | filters: FilterGroup
336 | search: String
337 | }
338 | input StixCoreObjectsTimeSeriesParameters {
339 | field: String!
340 | types: [String]
341 | filters: FilterGroup
342 | search: String
343 | }
344 | input StixRelationshipsTimeSeriesParameters {
345 | field: String!
346 | fromOrToId: [String]
347 | elementWithTargetTypes: [String]
348 | fromId: [String]
349 | fromRole: String
350 | fromTypes: [String]
351 | toId: [String]
352 | toRole: String
353 | toTypes: [String]
354 | relationship_type: [String]
355 | confidences: [Int]
356 | search: String
357 | filters: FilterGroup
358 | dynamicFrom: FilterGroup
359 | dynamicTo: FilterGroup
360 | }
361 | input StixCoreRelationshipsTimeSeriesParameters {
362 | field: String!
363 | fromOrToId: [String]
364 | elementWithTargetTypes: [String]
365 | fromId: [String]
366 | fromRole: String
367 | fromTypes: [String]
368 | toId: [String]
369 | toRole: String
370 | toTypes: [String]
371 | relationship_type: [String]
372 | confidences: [Int]
373 | search: String
374 | filters: FilterGroup
375 | dynamicFrom: FilterGroup
376 | dynamicTo: FilterGroup
377 | }
378 | type Distribution {
379 | label: String!
380 | entity: StixObjectOrStixRelationshipOrCreator
381 | value: Int
382 | }
383 | type MultiDistribution {
384 | data: [Distribution]
385 | }
386 | input StixCoreObjectsDistributionParameters {
387 | objectId: String
388 | relationship_type: [String]
389 | toTypes: [String]
390 | types: [String]
391 | filters: FilterGroup
392 | search: String
393 | }
394 | input StixCoreRelationshipsDistributionParameters {
395 | field: String!
396 | fromOrToId: [String]
397 | elementWithTargetTypes: [String]
398 | fromId: [String]
399 | fromRole: String
400 | fromTypes: [String]
401 | toId: [String]
402 | toRole: String
403 | toTypes: [String]
404 | relationship_type: [String]
405 | confidences: [Int]
406 | search: String
407 | filters: FilterGroup
408 | }
409 | type Number {
410 | total: Int!
411 | count: Int!
412 | }
413 | input StixCoreObjectsNumberParameters {
414 | types: [String]
415 | filters: FilterGroup
416 | search: String
417 | }
418 | type OpinionsMetrics {
419 | mean: Float
420 | min: Int
421 | max: Int
422 | total: Int
423 | }
424 |
425 | ### INTERFACES & TYPES
426 |
427 | ###### INTERNAL
428 |
429 | ############## Logs
430 | type LogsWorkerConfig {
431 | elasticsearch_url: [String]!
432 | elasticsearch_proxy: String
433 | elasticsearch_index: String!
434 | elasticsearch_username: String
435 | elasticsearch_password: String
436 | elasticsearch_api_key: String
437 | elasticsearch_ssl_reject_unauthorized: Boolean
438 | }
439 | enum LogsOrdering {
440 | event
441 | timestamp
442 | created_at
443 | event_type
444 | event_scope
445 | _score
446 | }
447 | type LogConnection {
448 | pageInfo: PageInfo!
449 | edges: [LogEdge]
450 | }
451 | type LogEdge {
452 | cursor: String!
453 | node: Log!
454 | }
455 | type ContextData {
456 | entity_id: String
457 | entity_name: String
458 | entity_type: String
459 | from_id: String
460 | to_id: String
461 | message: String!
462 | commit: String
463 | external_references: [ExternalReference!]
464 | }
465 | type Log {
466 | id: ID!
467 | entity_type: String
468 | event_type: String!
469 | event_scope: String
470 | event_status: String!
471 | timestamp: DateTime!
472 | user_id: String!
473 | user: Creator
474 | raw_data: String @auth(for: [SETTINGS_SECURITYACTIVITY])
475 | context_uri: String
476 | context_data: ContextData
477 | }
478 |
479 | ############## Attributes
480 | enum AttributesOrdering {
481 | value
482 | _score
483 | }
484 | type AttributeConnection {
485 | pageInfo: PageInfo!
486 | edges: [AttributeEdge!]!
487 | }
488 | type AttributeEdge {
489 | cursor: String!
490 | node: Attribute!
491 | }
492 | type Attribute {
493 | id: ID!
494 | key: String!
495 | value: String!
496 | }
497 | input WorkErrorInput {
498 | error: String
499 | source: String
500 | }
501 |
502 |
503 | ############## Taxii
504 | type TaxiiCollection {
505 | id: ID!
506 | name: String
507 | description: String
508 | filters: String
509 | include_inferences: Boolean
510 | score_to_confidence: Boolean
511 | taxii_public: Boolean
512 | authorized_members: [MemberAccess!] @auth(for: [TAXIIAPI_SETCOLLECTIONS])
513 | }
514 | type TaxiiCollectionConnection {
515 | pageInfo: PageInfo!
516 | edges: [TaxiiCollectionEdge]!
517 | }
518 |
519 | type TaxiiCollectionEdge {
520 | cursor: String!
521 | node: TaxiiCollection!
522 | }
523 | input TaxiiCollectionAddInput {
524 | name: String! @constraint(minLength: 2, format: "not-blank")
525 | description: String
526 | filters: String
527 | taxii_public: Boolean
528 | authorized_members: [MemberAccessInput!]
529 | include_inferences: Boolean
530 | score_to_confidence: Boolean
531 | }
532 | enum TaxiiCollectionOrdering {
533 | name
534 | id
535 | _score
536 | }
537 |
538 | type FeedMapping {
539 | type: String!
540 | attribute: String!
541 | }
542 |
543 | type FeedAttribute {
544 | attribute: String!
545 | mappings: [FeedMapping!]!
546 | }
547 |
548 | type Feed {
549 | id: ID!
550 | standard_id: ID!
551 | name: String!
552 | description: String
553 | filters: String
554 | separator: String!
555 | rolling_time: Int!
556 | feed_date_attribute: String
557 | include_header: Boolean!
558 | feed_types: [String!]!
559 | feed_attributes: [FeedAttribute!]!
560 | feed_public: Boolean
561 | authorized_members: [MemberAccess!] @auth(for: [TAXIIAPI])
562 | }
563 |
564 | input FeedMappingInput {
565 | type: String!
566 | attribute: String!
567 | }
568 |
569 | input FeedAttributeMappingInput {
570 | attribute: String!
571 | mappings: [FeedMappingInput!]!
572 | }
573 |
574 | input FeedAddInput {
575 | name: String! @constraint(minLength: 2, format: "not-blank")
576 | description: String
577 | filters: String
578 | separator: String!
579 | feed_date_attribute: String!
580 | rolling_time: Int!
581 | include_header: Boolean!
582 | feed_types: [String!]!
583 | feed_public: Boolean
584 | feed_attributes: [FeedAttributeMappingInput!]!
585 | authorized_members: [MemberAccessInput!]
586 | }
587 |
588 | enum FeedOrdering {
589 | name
590 | rolling_time
591 | feed_types
592 | _score
593 | }
594 |
595 | type FeedEdge {
596 | cursor: String!
597 | node: Feed!
598 | }
599 |
600 | type FeedConnection {
601 | pageInfo: PageInfo!
602 | edges: [FeedEdge]!
603 | }
604 |
605 | ############## Stream
606 | type RemoteStreamCollection {
607 | id: ID!
608 | name: String
609 | description: String
610 | filters: String
611 | }
612 | type StreamCollection {
613 | id: ID!
614 | name: String
615 | description: String
616 | filters: String
617 | stream_live: Boolean
618 | stream_public: Boolean
619 | authorized_members: [MemberAccess!] @auth(for: [TAXIIAPI])
620 | }
621 | type StreamCollectionConnection {
622 | pageInfo: PageInfo!
623 | edges: [StreamCollectionEdge!]!
624 | }
625 | type StreamCollectionEdge {
626 | cursor: String!
627 | node: StreamCollection!
628 | }
629 | input StreamCollectionAddInput {
630 | name: String! @constraint(minLength:2, format: "not-blank")
631 | description: String
632 | filters: String
633 | stream_live: Boolean
634 | stream_public: Boolean
635 | authorized_members: [MemberAccessInput!]
636 | }
637 | enum StreamCollectionOrdering {
638 | name
639 | stream_public
640 | id
641 | stream_live
642 | _score
643 | }
644 |
645 | ############## SubTypes
646 | enum SubTypesOrdering {
647 | label
648 | _score
649 | }
650 | type SubTypeConnection {
651 | pageInfo: PageInfo!
652 | edges: [SubTypeEdge!]!
653 | }
654 | type SubTypeEdge {
655 | cursor: String!
656 | node: SubType!
657 | }
658 | type SubType {
659 | id: ID!
660 | label: String!
661 | statuses: [Status!]!
662 | workflowEnabled: Boolean
663 | settings: EntitySetting # Simpler before moving workflow
664 | }
665 |
666 | ############## Statuses
667 | enum StatusTemplateOrdering {
668 | name
669 | _score
670 | }
671 | type StatusTemplate {
672 | id: ID!
673 | name: String!
674 | color: String!
675 | editContext: [EditUserContext!]
676 | usages: Int
677 | }
678 | type StatusTemplateConnection {
679 | pageInfo: PageInfo!
680 | edges: [StatusTemplateEdge]
681 | }
682 | type StatusTemplateEdge {
683 | cursor: String!
684 | node: StatusTemplate!
685 | }
686 | enum StatusOrdering {
687 | type
688 | order
689 | _score
690 | }
691 | type Status {
692 | id: ID!
693 | template_id: String!
694 | template: StatusTemplate
695 | type: String!
696 | order: Int!
697 | disabled: Boolean
698 | }
699 | type StatusConnection {
700 | pageInfo: PageInfo!
701 | edges: [StatusEdge!]!
702 | }
703 | type StatusEdge {
704 | cursor: String!
705 | node: Status!
706 | }
707 | input StatusAddInput {
708 | template_id: String!
709 | order: Int!
710 | }
711 | input StatusTemplateAddInput {
712 | name: String! @constraint(minLength:2, format: "not-blank")
713 | color: String!
714 | }
715 |
716 | ############## Sync
717 | enum SynchronizersOrdering {
718 | id
719 | name
720 | current_state_date
721 | running
722 | uri
723 | stream_id
724 | _score
725 | }
726 |
727 | type Synchronizer {
728 | id: ID!
729 | name: String!
730 | uri: String!
731 | token: String
732 | stream_id: String!
733 | user: Creator
734 | running: Boolean!
735 | current_state_date: DateTime
736 | listen_deletion: Boolean!
737 | no_dependencies: Boolean!
738 | ssl_verify: Boolean
739 | synchronized: Boolean
740 | queue_messages: Int!
741 | }
742 |
743 | type SynchronizerEdge {
744 | cursor: String!
745 | node: Synchronizer!
746 | }
747 |
748 | type SynchronizerConnection {
749 | pageInfo: PageInfo!
750 | edges: [SynchronizerEdge]
751 | }
752 |
753 | input SynchronizerAddInput {
754 | name: String! @constraint(minLength: 2, format: "not-blank")
755 | uri: String! @constraint(minLength: 2)
756 | token: String
757 | stream_id: String! @constraint(minLength: 2)
758 | user_id: String
759 | recover: DateTime
760 | current_state_date: DateTime
761 | listen_deletion: Boolean!
762 | no_dependencies: Boolean!
763 | ssl_verify: Boolean
764 | synchronized: Boolean
765 | }
766 |
767 | input SynchronizerFetchInput {
768 | uri: String!
769 | token: String
770 | ssl_verify: Boolean
771 | }
772 |
773 | ############## Files
774 | enum WorksOrdering {
775 | status
776 | timestamp
777 | _score
778 | }
779 | type WorkMessage {
780 | timestamp: DateTime
781 | message: String
782 | sequence: Int
783 | source: String
784 | }
785 | type WorkTracking {
786 | import_expected_number: Int
787 | import_last_processed: DateTime
788 | import_processed_number: Int
789 | }
790 | type Work {
791 | id: ID!
792 | name: String
793 | user: Creator
794 | connector: Connector
795 | timestamp: DateTime!
796 | status: State!
797 | event_source_id: String
798 | received_time: DateTime
799 | processed_time: DateTime
800 | completed_time: DateTime
801 | completed_number: Int
802 | messages: [WorkMessage]
803 | errors: [WorkMessage]
804 | tracking: WorkTracking
805 | }
806 | type WorkEdge {
807 | cursor: String!
808 | node: Work!
809 | }
810 | type WorkConnection {
811 | pageInfo: PageInfo!
812 | edges: [WorkEdge]
813 | }
814 | type FileMetadata {
815 | encoding: String
816 | mimetype: String
817 | version: String
818 | messages: [WorkMessage]
819 | errors: [WorkMessage]
820 | list_filters: String
821 | entity_id: String
822 | entity: StixObject
823 | labels_text: String
824 | labels: [String]
825 | file_markings: [String]
826 | creator_id: String
827 | external_reference_id: String
828 | creator: Creator
829 | description: String
830 | order: Int
831 | inCarousel: Boolean
832 | analysis_content_source: String
833 | analysis_content_type: String
834 | analysis_type: String
835 | }
836 | enum FileOrdering {
837 | _score
838 | name
839 | lastModified
840 | objectMarking
841 | }
842 | type File {
843 | id: ID!
844 | entity_type: String!
845 | name: String!
846 | size: Int
847 | lastModified: DateTime
848 | lastModifiedSinceMin: Int
849 | metaData: FileMetadata
850 | objectMarking: [MarkingDefinition!]!
851 | uploadStatus: State!
852 | works: [Work]
853 | }
854 | type FileEdge {
855 | cursor: String!
856 | node: File!
857 | }
858 | type FileConnection {
859 | pageInfo: PageInfo!
860 | edges: [FileEdge!]!
861 | }
862 |
863 | enum WidgetPerspective {
864 | entities
865 | relationships
866 | audits
867 | }
868 | type WidgetColumn {
869 | attribute: String!
870 | displayStyle: String
871 | label: String
872 | variableName: String
873 | }
874 | type WidgetDataSelection {
875 | label: String
876 | number: Int
877 | attribute: String
878 | date_attribute: String
879 | centerLat: Float
880 | centerLng: Float
881 | zoom: Float
882 | isTo: Boolean
883 | perspective: WidgetPerspective
884 | filters: String
885 | dynamicFrom: String
886 | dynamicTo: String
887 | columns: [WidgetColumn!]
888 | instance_id: String
889 | }
890 | type WidgetParameters {
891 | title: String
892 | description: String
893 | interval: String
894 | stacked: Boolean
895 | legend: Boolean
896 | distributed: Boolean
897 | }
898 | type WidgetLayout {
899 | w: Float
900 | h: Float
901 | x: Float
902 | y: Float
903 | i: Float
904 | moved: Boolean
905 | static: Boolean
906 | }
907 | type Widget {
908 | id: ID!
909 | type: String!
910 | perspective: WidgetPerspective
911 | dataSelection: [WidgetDataSelection!]!
912 | parameters: WidgetParameters
913 | layout: WidgetLayout
914 | }
915 | type Template {
916 | id: ID!
917 | name: String!
918 | description: String
919 | filters: String
920 | content: String!
921 | template_widgets_ids: [String!]!
922 | }
923 | type TemplateAndUtils {
924 | template: Template!,
925 | template_widgets: [Widget!]!,
926 | }
927 |
928 | type IndexedFile {
929 | id: ID!
930 | name: String!
931 | file_id: String!
932 | uploaded_at: DateTime!
933 | entity: StixObject
934 | searchOccurrences: Int
935 | }
936 | type IndexedFileEdge {
937 | cursor: String!
938 | node: IndexedFile!
939 | }
940 | type IndexedFileConnection {
941 | pageInfo: PageInfo!
942 | edges: [IndexedFileEdge]
943 | }
944 |
945 | type MetricsByMimeType {
946 | mimeType: String!
947 | count: Int!
948 | size: Float!
949 | }
950 |
951 | type FilesMetrics {
952 | globalCount: Int!
953 | globalSize: Float!
954 | metricsByMimeType: [MetricsByMimeType!]
955 | }
956 |
957 | type OpenCtiFile {
958 | id: ID!
959 | name: String!
960 | mime_type: String!
961 | description: String
962 | order: Int
963 | inCarousel: Boolean
964 | }
965 |
966 | ############## BackgroundTask
967 | enum BackgroundTaskType {
968 | QUERY
969 | LIST
970 | RULE
971 | }
972 | type BackgroundTaskError {
973 | id: ID!
974 | timestamp: DateTime
975 | message: String
976 | }
977 | enum BackgroundTaskScope {
978 | KNOWLEDGE
979 | USER
980 | SETTINGS
981 | IMPORT
982 | DASHBOARD
983 | PUBLIC_DASHBOARD
984 | INVESTIGATION
985 | }
986 | enum BackgroundTaskActionType {
987 | DELETE
988 | COMPLETE_DELETE
989 | RESTORE
990 | ADD
991 | REMOVE
992 | REPLACE
993 | MERGE
994 | ENRICHMENT
995 | PROMOTE
996 | RULE_ELEMENT_RESCAN
997 | SHARE
998 | UNSHARE
999 | SHARE_MULTIPLE
1000 | UNSHARE_MULTIPLE
1001 | }
1002 | enum BackgroundTaskContextType {
1003 | ATTRIBUTE
1004 | RELATION
1005 | REVERSED_RELATION
1006 | }
1007 | enum BackgroundTasksOrdering {
1008 | id
1009 | type
1010 | completed
1011 | created_at
1012 | last_execution_date
1013 | _score
1014 | }
1015 | type BackgroundTaskContext {
1016 | field: String
1017 | type: BackgroundTaskContextType
1018 | values: [String]!
1019 | }
1020 | type BackgroundTaskAction {
1021 | type: BackgroundTaskActionType
1022 | context: BackgroundTaskContext
1023 | }
1024 |
1025 | interface BackgroundTask {
1026 | id: ID!
1027 | type: BackgroundTaskType
1028 | initiator: Creator
1029 | actions: [BackgroundTaskAction]
1030 | created_at: DateTime
1031 | last_execution_date: DateTime
1032 | completed: Boolean
1033 | task_expected_number: Int
1034 | task_processed_number: Int
1035 | errors: [BackgroundTaskError]
1036 | }
1037 |
1038 | type RuleTask implements BackgroundTask {
1039 | id: ID!
1040 | type: BackgroundTaskType
1041 | initiator: Creator
1042 | actions: [BackgroundTaskAction]
1043 | created_at: DateTime
1044 | last_execution_date: DateTime
1045 | completed: Boolean
1046 | task_expected_number: Int
1047 | task_processed_number: Int
1048 | errors: [BackgroundTaskError]
1049 | # RuleTask
1050 | rule: ID!
1051 | enable: Boolean
1052 | }
1053 |
1054 | type ListTask implements BackgroundTask {
1055 | id: ID!
1056 | type: BackgroundTaskType
1057 | initiator: Creator
1058 | actions: [BackgroundTaskAction]
1059 | created_at: DateTime
1060 | last_execution_date: DateTime
1061 | completed: Boolean
1062 | task_expected_number: Int
1063 | task_processed_number: Int
1064 | errors: [BackgroundTaskError]
1065 | # QueryTask and ListTask
1066 | scope: BackgroundTaskScope!
1067 | authorized_members: [MemberAccess!],
1068 | authorized_authorities: [String]
1069 | # ListTask
1070 | task_ids: [ID!]
1071 | }
1072 |
1073 | type QueryTask implements BackgroundTask {
1074 | id: ID!
1075 | type: BackgroundTaskType
1076 | initiator: Creator
1077 | actions: [BackgroundTaskAction]
1078 | created_at: DateTime
1079 | last_execution_date: DateTime
1080 | completed: Boolean
1081 | task_expected_number: Int
1082 | task_processed_number: Int
1083 | errors: [BackgroundTaskError]
1084 | # QueryTask and ListTask
1085 | scope: BackgroundTaskScope!
1086 | authorized_members: [MemberAccess!],
1087 | authorized_authorities: [String]
1088 | # QueryTask
1089 | task_filters: String!
1090 | task_search: String
1091 | }
1092 |
1093 | type BackgroundTaskConnectionEdge {
1094 | cursor: String!
1095 | node: BackgroundTask!
1096 | }
1097 |
1098 | type BackgroundTaskConnection {
1099 | pageInfo: PageInfo!
1100 | edges: [BackgroundTaskConnectionEdge]
1101 | }
1102 |
1103 | input BackgroundTaskContextOptionsInput {
1104 | includeNeighbours: Boolean
1105 | }
1106 |
1107 | input BackgroundTaskContextInput {
1108 | field: String
1109 | type: BackgroundTaskContextType
1110 | values: [String]!
1111 | options: BackgroundTaskContextOptionsInput
1112 | }
1113 | input BackgroundTaskActionInput {
1114 | containerId: String
1115 | type: BackgroundTaskActionType!
1116 | context: BackgroundTaskContextInput
1117 | }
1118 | input ListTaskAddInput {
1119 | ids: [ID!]
1120 | actions: [BackgroundTaskActionInput]!
1121 | scope: BackgroundTaskScope!
1122 | }
1123 | input QueryTaskAddInput {
1124 | filters: String
1125 | search: String
1126 | excluded_ids: [ID]
1127 | actions: [BackgroundTaskActionInput]!
1128 | scope: BackgroundTaskScope!
1129 | }
1130 |
1131 | input RetentionRuleAddInput {
1132 | name: String! @constraint(minLength:2, format: "not-blank")
1133 | filters: String
1134 | max_retention: Int! @constraint(min: 1)
1135 | retention_unit: RetentionUnit
1136 | scope: RetentionRuleScope!
1137 | }
1138 | enum RetentionRuleOrdering {
1139 | name
1140 | scope
1141 | remaining_count
1142 | last_execution_date
1143 | max_retention
1144 | _score
1145 | }
1146 | enum RetentionRuleScope {
1147 | knowledge
1148 | file
1149 | workbench
1150 | }
1151 | enum RetentionUnit {
1152 | minutes
1153 | hours
1154 | days
1155 | }
1156 | type RetentionRule {
1157 | id: ID!
1158 | standard_id: String!
1159 | name: String!
1160 | filters: String!
1161 | max_retention: Int!
1162 | retention_unit: RetentionUnit!
1163 | last_execution_date: DateTime
1164 | last_deleted_count: Int
1165 | remaining_count: Int
1166 | scope: RetentionRuleScope!
1167 | }
1168 | type RetentionRuleConnection {
1169 | pageInfo: PageInfo!
1170 | edges: [RetentionRuleEdge]
1171 | }
1172 | type RetentionRuleEdge {
1173 | cursor: String!
1174 | node: RetentionRule!
1175 | }
1176 | type RetentionRuleEditMutations {
1177 | delete: ID
1178 | fieldPatch(input: [EditInput]!): RetentionRule
1179 | }
1180 | ###### ENTITIES
1181 | interface BasicObject {
1182 | id: ID! # internal_id
1183 | standard_id: String!
1184 | entity_type: String!
1185 | parent_types: [String]!
1186 | }
1187 |
1188 | ######## INTERNAL OBJECT ENTITIES
1189 | interface InternalObject {
1190 | # BasicObject
1191 | id: ID! # internal_id!
1192 | entity_type: String!
1193 | }
1194 |
1195 | ############## Settings
1196 | type Module {
1197 | id: ID!
1198 | enable: Boolean!
1199 | running: Boolean!
1200 | warning: Boolean
1201 | }
1202 | type Cluster {
1203 | instances_number: Int!
1204 | }
1205 | type Provider {
1206 | name: String!
1207 | type: String
1208 | strategy: String
1209 | provider: String
1210 | }
1211 | type UserStatus {
1212 | status: String!
1213 | message: String!
1214 | }
1215 | input SettingsMessageInput {
1216 | id: ID
1217 | message: String!
1218 | activated: Boolean!
1219 | dismissible: Boolean!
1220 | color: String
1221 | recipients: [String!]
1222 | }
1223 | type SettingsMessage {
1224 | id: ID!
1225 | message: String!
1226 | activated: Boolean!
1227 | dismissible: Boolean!
1228 | updated_at: DateTime!
1229 | color: String
1230 | recipients: [Member!] @auth(for: [SETTINGS_SETPARAMETERS])
1231 | }
1232 |
1233 | enum PlatformCriticalAlertType {
1234 | GROUP_WITH_NULL_CONFIDENCE_LEVEL
1235 | }
1236 | type PlatformCriticalAlertDetails {
1237 | groups: [Group!]!
1238 | }
1239 | type PlatformCriticalAlert {
1240 | message: String!
1241 | type: PlatformCriticalAlertType!
1242 | details: PlatformCriticalAlertDetails
1243 | }
1244 | type PlatformProtectedSubConfig {
1245 | enabled: Boolean!
1246 | protected_ids: [String!]!
1247 | }
1248 |
1249 | type PlatformProtectedSensitiveConfig {
1250 | enabled: Boolean!
1251 | markings: PlatformProtectedSubConfig!
1252 | groups: PlatformProtectedSubConfig!
1253 | roles: PlatformProtectedSubConfig!
1254 | rules: PlatformProtectedSubConfig!
1255 | ce_ee_toggle: PlatformProtectedSubConfig!
1256 | file_indexing: PlatformProtectedSubConfig!
1257 | platform_organization: PlatformProtectedSubConfig!
1258 | }
1259 | type Settings implements InternalObject & BasicObject {
1260 | id: ID!
1261 | standard_id: String! @auth
1262 | entity_type: String! @auth
1263 | parent_types: [String!]! @auth
1264 | # Settings
1265 | platform_organization: Organization
1266 | platform_title: String
1267 | platform_favicon: String
1268 | platform_email: String @auth
1269 | platform_cluster: Cluster! @auth
1270 | platform_modules: [Module!] @auth
1271 | platform_url: String
1272 | platform_providers: [Provider!]!
1273 | platform_user_statuses: [UserStatus!]!
1274 | platform_language: String
1275 | platform_theme: String
1276 | platform_theme_dark_background: String
1277 | platform_theme_dark_paper: String
1278 | platform_theme_dark_nav: String
1279 | platform_theme_dark_primary: String
1280 | platform_theme_dark_secondary: String
1281 | platform_theme_dark_accent: String
1282 | platform_theme_dark_logo: String
1283 | platform_theme_dark_logo_collapsed: String
1284 | platform_theme_dark_logo_login: String
1285 | platform_theme_light_background: String
1286 | platform_theme_light_paper: String
1287 | platform_theme_light_nav: String
1288 | platform_theme_light_primary: String
1289 | platform_theme_light_secondary: String
1290 | platform_theme_light_accent: String
1291 | platform_theme_light_logo: String
1292 | platform_theme_light_logo_collapsed: String
1293 | platform_theme_light_logo_login: String
1294 | platform_map_tile_server_dark: String
1295 | platform_map_tile_server_light: String
1296 | platform_openbas_url: String
1297 | platform_openbas_disable_display: Boolean
1298 | platform_openerm_url: String
1299 | platform_openmtd_url: String
1300 | platform_ai_enabled: Boolean!
1301 | platform_ai_type: String
1302 | platform_ai_model: String
1303 | platform_ai_has_token: Boolean!
1304 | platform_login_message: String
1305 | platform_consent_message: String
1306 | platform_consent_confirm_text: String
1307 | platform_banner_text: String
1308 | platform_banner_level: String
1309 | platform_session_idle_timeout: Int
1310 | platform_session_timeout: Int
1311 | platform_whitemark: Boolean
1312 | platform_demo: Boolean
1313 | platform_reference_attachment: Boolean @auth
1314 | platform_feature_flags: [Module!] @auth
1315 | platform_critical_alerts: [PlatformCriticalAlert!]!
1316 | platform_trash_enabled: Boolean!
1317 | platform_protected_sensitive_config: PlatformProtectedSensitiveConfig! @auth
1318 | created_at: DateTime! @auth
1319 | updated_at: DateTime! @auth
1320 | enterprise_edition: DateTime
1321 | activity_listeners: [Member!] @auth(for: [SETTINGS_SECURITYACTIVITY])
1322 | otp_mandatory: Boolean @auth
1323 | password_policy_min_length: Int @auth
1324 | password_policy_max_length: Int @auth
1325 | password_policy_min_symbols: Int @auth
1326 | password_policy_min_numbers: Int @auth
1327 | password_policy_min_words: Int @auth
1328 | password_policy_min_lowercase: Int @auth
1329 | password_policy_min_uppercase: Int @auth
1330 | platform_messages: [SettingsMessage!] @auth
1331 | messages_administration: [SettingsMessage!] @auth(for: [SETTINGS_SETPARAMETERS])
1332 | analytics_google_analytics_v4: String @auth
1333 | # Technical
1334 | editContext: [EditUserContext!] @auth(for: [SETTINGS_SETPARAMETERS])
1335 | }
1336 |
1337 | ############## Groups
1338 | enum GroupsOrdering {
1339 | name
1340 | default_assignation
1341 | no_creators
1342 | restrict_delete
1343 | auto_new_marking
1344 | created_at
1345 | updated_at
1346 | group_confidence_level
1347 | _score
1348 | }
1349 |
1350 | type GroupConnection {
1351 | pageInfo: PageInfo!
1352 | edges: [GroupEdge]
1353 | }
1354 | type GroupEdge {
1355 | cursor: String!
1356 | node: Group!
1357 | }
1358 | input DefaultMarkingInput {
1359 | entity_type: String!
1360 | values: [String!]
1361 | }
1362 | type DefaultMarking {
1363 | entity_type: String
1364 | values: [MarkingDefinition!]
1365 | }
1366 | type Group implements InternalObject & BasicObject {
1367 | id: ID! # internal_id
1368 | standard_id: String!
1369 | entity_type: String!
1370 | parent_types: [String]!
1371 | # Group
1372 | name: String!
1373 | default_assignation: Boolean
1374 | no_creators: Boolean
1375 | restrict_delete: Boolean
1376 | auto_new_marking: Boolean
1377 | description: String
1378 | default_dashboard: Workspace
1379 | members(
1380 | first: Int
1381 | after: ID
1382 | orderBy: UsersOrdering
1383 | orderMode: OrderingMode
1384 | search: String
1385 | ): UserConnection @auth(for: [SETTINGS_SETACCESSES])
1386 | created_at: DateTime
1387 | updated_at: DateTime
1388 | roles(orderBy: RolesOrdering, orderMode: OrderingMode): RoleConnection
1389 | allowed_marking: [MarkingDefinition!]
1390 | default_marking: [DefaultMarking!]
1391 | not_shareable_marking_types: [String!]!
1392 | max_shareable_marking: [MarkingDefinition!]!
1393 | default_hidden_types: [String!]
1394 | group_confidence_level: ConfidenceLevel
1395 | # Technical
1396 | editContext: [EditUserContext!]
1397 | }
1398 | input GroupAddInput {
1399 | name: String! @constraint(minLength: 2, format: "not-blank")
1400 | description: String
1401 | default_assignation: Boolean
1402 | no_creators: Boolean
1403 | restrict_delete: Boolean
1404 | auto_new_marking: Boolean
1405 | clientMutationId: String
1406 | group_confidence_level: ConfidenceLevelInput!
1407 | }
1408 |
1409 | ############## Users
1410 | enum UnitSystem {
1411 | auto
1412 | Metric
1413 | Imperial
1414 | }
1415 | enum UsersOrdering {
1416 | name
1417 | user_email
1418 | firstname
1419 | lastname
1420 | language
1421 | external
1422 | created_at
1423 | updated_at
1424 | _score
1425 | }
1426 | type UserConnection {
1427 | pageInfo: PageInfo!
1428 | edges: [UserEdge!]!
1429 | }
1430 | type CreatorConnection {
1431 | pageInfo: PageInfo!
1432 | edges: [CreatorEdge]
1433 | }
1434 | type AssigneeConnection {
1435 | pageInfo: PageInfo!
1436 | edges: [AssigneeEdge!]!
1437 | }
1438 | type ParticipantConnection {
1439 | pageInfo: PageInfo!
1440 | edges: [ParticipantEdge!]!
1441 | }
1442 | type MemberConnection {
1443 | pageInfo: PageInfo!
1444 | edges: [MemberEdge!]!
1445 | }
1446 | type UserEdge {
1447 | cursor: String!
1448 | node: User!
1449 | }
1450 | type CreatorEdge {
1451 | cursor: String!
1452 | node: Creator!
1453 | }
1454 | type AssigneeEdge {
1455 | cursor: String!
1456 | node: Assignee!
1457 | }
1458 | type ParticipantEdge {
1459 | cursor: String!
1460 | node: Participant!
1461 | }
1462 | type MemberEdge {
1463 | cursor: String!
1464 | node: Member!
1465 | }
1466 | type Assignee {
1467 | id: ID! # internal_id
1468 | name: String!
1469 | entity_type: String!
1470 | }
1471 | type Participant {
1472 | id: ID! # internal_id
1473 | name: String!
1474 | entity_type: String!
1475 | }
1476 | type Member {
1477 | id: ID! # internal_id
1478 | name: String!
1479 | entity_type: String!
1480 | # entity_type == User
1481 | effective_confidence_level: EffectiveConfidenceLevel
1482 | # entity_type == Group
1483 | group_confidence_level: ConfidenceLevel
1484 | }
1485 |
1486 | type MemberAccess {
1487 | id: ID! # internal_id
1488 | name: String!
1489 | entity_type: String!
1490 | access_right: String!
1491 | }
1492 | input MemberAccessInput {
1493 | id: ID! # internal_id
1494 | access_right: String!
1495 | }
1496 | type OtpElement {
1497 | secret: String!
1498 | uri: String!
1499 | }
1500 | type Creator {
1501 | id: ID! # internal_id
1502 | name: String!
1503 | entity_type: String!
1504 | representative: Representative!
1505 | }
1506 |
1507 | type ConfidenceLevel {
1508 | max_confidence: Int
1509 | overrides: [ConfidenceLevelOverride!]!
1510 | }
1511 | type ConfidenceLevelOverride {
1512 | entity_type: String!
1513 | max_confidence: Int!
1514 | }
1515 | type EffectiveConfidenceLevelOverride {
1516 | entity_type: String!
1517 | max_confidence: Int!
1518 | source: EffectiveConfidenceLevelSource
1519 | }
1520 | type EffectiveConfidenceLevel {
1521 | max_confidence: Int!
1522 | overrides: [EffectiveConfidenceLevelOverride!]!
1523 | source: EffectiveConfidenceLevelSource
1524 | }
1525 |
1526 | type EffectiveConfidenceLevelSource {
1527 | type: EffectiveConfidenceLevelSourceType!
1528 | object: EffectiveConfidenceLevelSourceObject
1529 | }
1530 | enum EffectiveConfidenceLevelSourceType {
1531 | User,
1532 | Group,
1533 | Bypass
1534 | }
1535 | union EffectiveConfidenceLevelSourceObject = Group | User
1536 |
1537 | type User implements BasicObject & InternalObject {
1538 | id: ID! # internal_id
1539 | standard_id: String!
1540 | entity_type: String!
1541 | parent_types: [String]!
1542 | # User
1543 | user_email: String!
1544 | api_token: String! @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
1545 | personal_notifiers: [Notifier!]
1546 | individual_id: String
1547 | name: String!
1548 | description: String
1549 | firstname: String
1550 | otp_activated: Boolean
1551 | stateless_session: Boolean
1552 | otp_qr: String
1553 | otp_mandatory: Boolean
1554 | lastname: String
1555 | theme: String
1556 | language: String
1557 | external: Boolean
1558 | roles(
1559 | orderBy: RolesOrdering
1560 | orderMode: OrderingMode
1561 | ): [Role!]!
1562 | capabilities: [Capability]!
1563 | default_hidden_types: [String!]!
1564 | user_confidence_level: ConfidenceLevel
1565 | effective_confidence_level: EffectiveConfidenceLevel
1566 | no_creators: Boolean
1567 | restrict_delete: Boolean
1568 | groups(
1569 | orderBy: GroupsOrdering
1570 | orderMode: OrderingMode
1571 | ): GroupConnection @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
1572 | objectOrganization(
1573 | orderBy: OrganizationsOrdering
1574 | orderMode: OrderingMode
1575 | ): OrganizationConnection @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
1576 | created_at: DateTime!
1577 | updated_at: DateTime!
1578 | sessions: [SessionDetail] @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
1579 | default_time_field: String
1580 | account_status: String! @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
1581 | account_lock_after_date: DateTime @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
1582 | administrated_organizations: [Organization!]!
1583 | unit_system: UnitSystem
1584 | submenu_show_icons: Boolean
1585 | submenu_auto_collapse: Boolean
1586 | monochrome_labels: Boolean
1587 | # Technical
1588 | editContext: [EditUserContext!]
1589 | }
1590 |
1591 | type MeUser implements BasicObject & InternalObject {
1592 | id: ID! # internal_id
1593 | standard_id: String!
1594 | entity_type: String!
1595 | parent_types: [String!]!
1596 | user_email: String!
1597 | name: String!
1598 | description: String
1599 | firstname: String
1600 | otp_activated: Boolean
1601 | otp_qr: String
1602 | lastname: String
1603 | theme: String
1604 | language: String
1605 | external: Boolean
1606 | individual_id: String
1607 | api_token: String!
1608 | personal_notifiers: [Notifier!]
1609 | objectOrganization: MeOrganizationConnection
1610 | capabilities: [Capability!]!
1611 | default_hidden_types: [String]!
1612 | user_confidence_level: ConfidenceLevel
1613 | effective_confidence_level: EffectiveConfidenceLevel
1614 | no_creators: Boolean
1615 | restrict_delete: Boolean
1616 | allowed_marking: [MarkingDefinition!]
1617 | default_marking: [DefaultMarking!]
1618 | max_shareable_marking: [MarkingDefinition!]
1619 | otp_mandatory: Boolean
1620 | groups(
1621 | orderBy: GroupsOrdering
1622 | orderMode: OrderingMode
1623 | ): GroupConnection
1624 | default_dashboards: [Workspace!]!
1625 | default_dashboard: Workspace
1626 | default_time_field: String
1627 | account_status: String!
1628 | account_lock_after_date: DateTime
1629 | administrated_organizations: [Organization!]!
1630 | unit_system: UnitSystem
1631 | submenu_show_icons: Boolean
1632 | submenu_auto_collapse: Boolean
1633 | monochrome_labels: Boolean
1634 | can_manage_sensitive_config: Boolean
1635 | draftContext: DraftWorkspace
1636 | }
1637 | type SessionDetail {
1638 | id: ID!
1639 | created: DateTime
1640 | ttl: Int
1641 | originalMaxAge: Int
1642 | }
1643 | type UserSession {
1644 | user: Creator
1645 | sessions: [SessionDetail]
1646 | }
1647 | input UserAddInput {
1648 | user_email: String! @constraint(minLength: 5, format: "email")
1649 | name: String! @constraint(minLength: 2, format: "not-blank")
1650 | password: String!
1651 | firstname: String
1652 | lastname: String
1653 | description: String
1654 | language: String
1655 | theme: String
1656 | objectOrganization: [ID!]
1657 | account_status: String
1658 | account_lock_after_date: DateTime
1659 | unit_system: String
1660 | submenu_show_icons: Boolean
1661 | submenu_auto_collapse: Boolean
1662 | monochrome_labels: Boolean
1663 | groups: [ID!]
1664 | user_confidence_level: ConfidenceLevelInput
1665 | }
1666 |
1667 | input ConfidenceLevelInput {
1668 | max_confidence: Int
1669 | overrides: [ConfidenceLevelOverrideInput!]!
1670 | }
1671 |
1672 | input ConfidenceLevelOverrideInput {
1673 | entity_type: String!
1674 | max_confidence: Int!
1675 | }
1676 |
1677 | input UserLoginInput {
1678 | email: String!
1679 | password: String!
1680 | }
1681 |
1682 | input UserOTPLoginInput {
1683 | code: String!
1684 | }
1685 |
1686 | input UserOTPActivationInput {
1687 | secret: String!
1688 | code: String!
1689 | }
1690 |
1691 | ############## Roles
1692 | enum RolesOrdering {
1693 | name
1694 | created_at
1695 | updated_at
1696 | _score
1697 | }
1698 | type RoleConnection {
1699 | pageInfo: PageInfo!
1700 | edges: [RoleEdge!]
1701 | }
1702 | type RoleEdge {
1703 | cursor: String!
1704 | node: Role!
1705 | }
1706 | type Role implements BasicObject & InternalObject {
1707 | id: ID! # internal_id
1708 | standard_id: String!
1709 | entity_type: String!
1710 | parent_types: [String]!
1711 | # Role
1712 | name: String!
1713 | description: String
1714 | created_at: DateTime!
1715 | updated_at: DateTime!
1716 | capabilities: [Capability]
1717 | editContext: [EditUserContext!]
1718 | can_manage_sensitive_config: Boolean
1719 | }
1720 | input RoleAddInput {
1721 | name: String! @constraint(minLength: 2, format: "not-blank")
1722 | description: String
1723 | clientMutationId: String
1724 | }
1725 |
1726 | ############## Capabilities
1727 | type CapabilityConnection {
1728 | pageInfo: PageInfo!
1729 | edges: [CapabilityEdge]
1730 | }
1731 | type CapabilityEdge {
1732 | cursor: String!
1733 | node: Capability!
1734 | }
1735 | type Capability implements BasicObject & InternalObject {
1736 | id: ID! # internal_id
1737 | standard_id: String!
1738 | entity_type: String!
1739 | parent_types: [String]!
1740 | # Capability
1741 | name: String!
1742 | description: String
1743 | attribute_order: Int
1744 | created_at: DateTime!
1745 | updated_at: DateTime!
1746 | # Technical
1747 | editContext: [EditUserContext!]
1748 | }
1749 |
1750 | ############## Connectors
1751 | enum ConnectorType {
1752 | EXTERNAL_IMPORT
1753 | INTERNAL_IMPORT_FILE
1754 | INTERNAL_ENRICHMENT
1755 | INTERNAL_ANALYSIS
1756 | INTERNAL_EXPORT_FILE
1757 | STREAM
1758 | }
1759 |
1760 | input ExportAskInput {
1761 | format: String!
1762 | exportType: String!
1763 | contentMaxMarkings: [String]
1764 | fileMarkings: [String]
1765 | }
1766 |
1767 | input StixCoreObjectsExportAskInput {
1768 | format: String!
1769 | exportType: String!
1770 | contentMaxMarkings: [String]
1771 | fileMarkings: [String]
1772 | search: String
1773 | exportContext: ExportContext
1774 | orderBy: StixCoreObjectsOrdering
1775 | orderMode: OrderingMode
1776 | filters: FilterGroup
1777 | selectedIds: [String]
1778 | }
1779 |
1780 | input StixCoreRelationshipsExportAskInput {
1781 | format: String!
1782 | exportType: String!
1783 | contentMaxMarkings: [String]
1784 | fileMarkings: [String]
1785 | exportContext: ExportContext
1786 | search: String
1787 | orderBy: StixCoreRelationshipsOrdering
1788 | orderMode: OrderingMode
1789 | selectedIds: [String]
1790 | fromOrToId: [String]
1791 | elementWithTargetTypes: [String]
1792 | fromId: [String]
1793 | fromRole: String
1794 | fromTypes: [String]
1795 | toId: [String]
1796 | toRole: String
1797 | toTypes: [String]
1798 | relationship_type: [String]
1799 | filters: FilterGroup
1800 | }
1801 |
1802 | input StixCyberObservablesExportAskInput {
1803 | format: String!
1804 | exportType: String!
1805 | exportContext: ExportContext
1806 | contentMaxMarkings: [String]
1807 | fileMarkings: [String]
1808 | search: String
1809 | orderBy: StixCyberObservablesOrdering
1810 | orderMode: OrderingMode
1811 | filters: FilterGroup
1812 | selectedIds: [String]
1813 | }
1814 |
1815 | input RegisterConnectorInput {
1816 | id: ID!
1817 | name: String! @constraint(minLength:2, format: "not-blank")
1818 | type: ConnectorType!
1819 | scope: [String!]
1820 | auto: Boolean
1821 | only_contextual: Boolean
1822 | playbook_compatible: Boolean
1823 | }
1824 | type RabbitMQConnection {
1825 | host: String!
1826 | vhost: String!
1827 | use_ssl: Boolean!
1828 | port: Int!
1829 | user: String!
1830 | pass: String!
1831 | }
1832 |
1833 | input ConnectorInfoInput {
1834 | run_and_terminate: Boolean!
1835 | buffering: Boolean!
1836 | queue_threshold: Float!
1837 | queue_messages_size: Float!
1838 | next_run_datetime: DateTime
1839 | last_run_datetime: DateTime
1840 | }
1841 |
1842 | type ConnectorInfo {
1843 | run_and_terminate: Boolean!
1844 | buffering: Boolean!
1845 | queue_threshold: Float!
1846 | queue_messages_size: Float!
1847 | next_run_datetime: DateTime
1848 | last_run_datetime: DateTime
1849 | }
1850 |
1851 | type ConnectorConfig {
1852 | connection: RabbitMQConnection! @auth(for: [CONNECTORAPI])
1853 | listen: String!
1854 | listen_routing: String!
1855 | listen_exchange: String!
1856 | push: String!
1857 | push_routing: String!
1858 | push_exchange: String!
1859 | }
1860 |
1861 | type ConnectorMetadata {
1862 | configuration: String!
1863 | }
1864 | type ConnectorConfiguration {
1865 | id: ID!
1866 | name: String!
1867 | configuration: String!
1868 | }
1869 |
1870 | type ConnectorQueueDetails {
1871 | messages_number: Float!
1872 | messages_size: Float!
1873 | }
1874 |
1875 | type Connector implements BasicObject & InternalObject {
1876 | id: ID! # internal_id
1877 | standard_id: String!
1878 | entity_type: String!
1879 | parent_types: [String]!
1880 | # Connector
1881 | name: String!
1882 | active: Boolean
1883 | auto: Boolean
1884 | only_contextual: Boolean
1885 | playbook_compatible: Boolean
1886 | connector_trigger_filters: String
1887 | connector_type: String
1888 | connector_scope: [String!]
1889 | connector_state: String
1890 | connector_schema: String
1891 | connector_schema_ui: String
1892 | connector_state_reset: Boolean
1893 | connector_user_id: ID
1894 | connector_user: User
1895 | connector_queue_details: ConnectorQueueDetails!
1896 | connector_info: ConnectorInfo
1897 | updated_at: DateTime
1898 | created_at: DateTime
1899 | config: ConnectorConfig
1900 | works(status: String): [Work]
1901 | ## Built in Connector
1902 | built_in: Boolean
1903 | configurations: [ConnectorConfiguration!]
1904 | }
1905 |
1906 | ############## Rules
1907 | type RuleExecutionError {
1908 | timestamp: DateTime
1909 | source: String
1910 | error: String
1911 | }
1912 | type RuleManager {
1913 | id: ID! # internal_id
1914 | activated: Boolean!
1915 | lastEventId: String
1916 | errors: [RuleExecutionError]
1917 | }
1918 |
1919 | type DisplayStep {
1920 | source: String
1921 | source_color: String
1922 | relation: String
1923 | target: String
1924 | target_color: String
1925 | identifier: String
1926 | identifier_color: String
1927 | action: String
1928 | }
1929 |
1930 | type Display {
1931 | if: [DisplayStep]
1932 | then: [DisplayStep]
1933 | }
1934 |
1935 | type Rule {
1936 | id: ID! # internal_id
1937 | name: String!
1938 | description: String!
1939 | activated: Boolean!
1940 | category: String
1941 | display: Display
1942 | }
1943 |
1944 | ######## STIX OBJECT ENTITIES
1945 | type InferenceAttribute {
1946 | field: String!
1947 | value: String!
1948 | }
1949 | type Inference {
1950 | rule: Rule!
1951 | explanation: [StixObjectOrStixRelationship]!
1952 | attributes: [InferenceAttribute]
1953 | }
1954 |
1955 | enum DraftOperation {
1956 | create
1957 | update
1958 | delete
1959 | }
1960 |
1961 | type DraftVersion {
1962 | draft_id: String!
1963 | draft_operation: DraftOperation!
1964 | }
1965 |
1966 | interface StixObject {
1967 | id: ID! # internal_id
1968 | standard_id: String!
1969 | entity_type: String!
1970 | parent_types: [String]!
1971 | # StixObject
1972 | representative: Representative!
1973 | x_opencti_stix_ids: [StixId]
1974 | is_inferred: Boolean!
1975 | spec_version: String!
1976 | created_at: DateTime!
1977 | updated_at: DateTime!
1978 | draftVersion: DraftVersion
1979 | # Technical
1980 | creators: [Creator!]
1981 | # inferences
1982 | x_opencti_inferences: [Inference]
1983 | }
1984 |
1985 | ######## STIX META OBJECT ENTITIES
1986 | enum StixMetaObjectsOrdering {
1987 | entity_type
1988 | created
1989 | modified
1990 | spec_version
1991 | created_at
1992 | updated_at
1993 | _score
1994 | }
1995 | type StixMetaObjectConnection {
1996 | pageInfo: PageInfo!
1997 | edges: [StixMetaObjectEdge]
1998 | }
1999 | type StixMetaObjectEdge {
2000 | cursor: String!
2001 | node: StixMetaObject!
2002 | }
2003 | interface StixMetaObject {
2004 | id: ID! # internal_id
2005 | standard_id: String!
2006 | entity_type: String!
2007 | parent_types: [String]!
2008 | # StixObject
2009 | x_opencti_stix_ids: [StixId]
2010 | is_inferred: Boolean!
2011 | spec_version: String!
2012 | created_at: DateTime!
2013 | updated_at: DateTime!
2014 | draftVersion: DraftVersion
2015 | # StixMetaObject
2016 | created: DateTime
2017 | modified: DateTime
2018 | }
2019 |
2020 | ############## MarkingDefinitions
2021 | enum MarkingDefinitionsOrdering {
2022 | definition_type
2023 | definition
2024 | x_opencti_order
2025 | x_opencti_color
2026 | created
2027 | modified
2028 | created_at
2029 | updated_at
2030 | _score
2031 | }
2032 | type MarkingDefinitionConnection {
2033 | pageInfo: PageInfo!
2034 | edges: [MarkingDefinitionEdge!]!
2035 | }
2036 | type MarkingDefinitionEdge {
2037 | cursor: String!
2038 | node: MarkingDefinition!
2039 | }
2040 | type MarkingDefinition implements BasicObject & StixObject & StixMetaObject {
2041 | id: ID! # internal_id
2042 | standard_id: String!
2043 | entity_type: String!
2044 | parent_types: [String]!
2045 | # StixObject
2046 | representative: Representative!
2047 | x_opencti_stix_ids: [StixId]
2048 | is_inferred: Boolean!
2049 | spec_version: String!
2050 | created_at: DateTime!
2051 | updated_at: DateTime!
2052 | draftVersion: DraftVersion
2053 | # inferences
2054 | x_opencti_inferences: [Inference]
2055 | # StixMetaObject
2056 | created: DateTime
2057 | modified: DateTime
2058 | # MarkingDefinition
2059 | definition_type: String
2060 | definition: String
2061 | x_opencti_order: Int!
2062 | x_opencti_color: String
2063 | # Technical
2064 | creators: [Creator!]
2065 | toStix: String
2066 | editContext: [EditUserContext!]
2067 | }
2068 | input MarkingDefinitionAddInput {
2069 | stix_id: StixId
2070 | x_opencti_stix_ids: [StixId]
2071 | definition_type: String!
2072 | definition: String!
2073 | x_opencti_order: Int!
2074 | x_opencti_color: String
2075 | created: DateTime
2076 | modified: DateTime
2077 | clientMutationId: String
2078 | update: Boolean
2079 | }
2080 | type MarkingDefinitionShort {
2081 | id: ID! # internal_id
2082 | standard_id: String!
2083 | entity_type: String!
2084 | representative: Representative
2085 | definition_type: String
2086 | definition: String
2087 | x_opencti_order: Int!
2088 | x_opencti_color: String
2089 | }
2090 |
2091 | ############## Labels
2092 | enum LabelsOrdering {
2093 | value
2094 | color
2095 | created
2096 | modified
2097 | created_at
2098 | updated_at
2099 | _score
2100 | }
2101 | type LabelConnection {
2102 | pageInfo: PageInfo!
2103 | edges: [LabelEdge!]!
2104 | }
2105 | type LabelEdge {
2106 | cursor: String!
2107 | node: Label!
2108 | }
2109 | type Label implements BasicObject & StixObject & StixMetaObject {
2110 | id: ID! # internal_id
2111 | standard_id: String!
2112 | entity_type: String!
2113 | parent_types: [String]!
2114 | # StixObject
2115 | representative: Representative!
2116 | x_opencti_stix_ids: [StixId]
2117 | is_inferred: Boolean!
2118 | spec_version: String!
2119 | created_at: DateTime!
2120 | updated_at: DateTime!
2121 | draftVersion: DraftVersion
2122 | # inferences
2123 | x_opencti_inferences: [Inference]
2124 | # StixMetaObject
2125 | created: DateTime
2126 | modified: DateTime
2127 | # MarkingDefinition
2128 | value: String
2129 | color: String
2130 | # Technical
2131 | creators: [Creator!]
2132 | toStix: String
2133 | editContext: [EditUserContext!]
2134 | }
2135 | input LabelAddInput {
2136 | stix_id: StixId
2137 | x_opencti_stix_ids: [StixId]
2138 | value: String!
2139 | color: String
2140 | created: DateTime
2141 | modified: DateTime
2142 | clientMutationId: String
2143 | update: Boolean
2144 | }
2145 |
2146 | ############## ExternalReferences
2147 | enum ExternalReferencesOrdering {
2148 | source_name
2149 | url
2150 | hash
2151 | external_id
2152 | created
2153 | modified
2154 | created_at
2155 | updated_at
2156 | creator
2157 | _score
2158 | }
2159 | type ExternalReferenceConnection {
2160 | pageInfo: PageInfo!
2161 | edges: [ExternalReferenceEdge!]!
2162 | }
2163 | type ExternalReferenceEdge {
2164 | cursor: String!
2165 | node: ExternalReference!
2166 | }
2167 | type ExternalReference implements BasicObject & StixObject & StixMetaObject {
2168 | id: ID! # internal_id
2169 | standard_id: String!
2170 | entity_type: String!
2171 | parent_types: [String]!
2172 | # StixObject
2173 | representative: Representative!
2174 | x_opencti_stix_ids: [StixId]
2175 | is_inferred: Boolean!
2176 | spec_version: String!
2177 | created_at: DateTime!
2178 | updated_at: DateTime!
2179 | draftVersion: DraftVersion
2180 | # inferences
2181 | x_opencti_inferences: [Inference]
2182 | # StixMetaObject
2183 | created: DateTime
2184 | modified: DateTime
2185 | # ExternalReference
2186 | source_name: String!
2187 | description: String
2188 | url: String
2189 | hash: String
2190 | external_id: String
2191 | references(types: [String]): StixObjectOrStixRelationshipConnection
2192 | fileId: String
2193 | # Technical
2194 | creators: [Creator!]
2195 | importFiles(
2196 | first: Int
2197 | prefixMimeType: String
2198 | after: ID
2199 | orderBy: FileOrdering
2200 | orderMode: OrderingMode
2201 | search: String
2202 | filters: FilterGroup
2203 | ): FileConnection!
2204 | pendingFiles(
2205 | first: Int
2206 | after: ID
2207 | orderBy: FileOrdering
2208 | orderMode: OrderingMode
2209 | search: String
2210 | filters: FilterGroup
2211 | ): FileConnection!
2212 | exportFiles(first: Int): FileConnection
2213 | editContext: [EditUserContext!]
2214 | connectors(onlyAlive: Boolean): [Connector]
2215 | jobs(first: Int): [Work]
2216 | }
2217 | input ExternalReferenceAddInput {
2218 | stix_id: StixId
2219 | x_opencti_stix_ids: [StixId]
2220 | source_name: String! @constraint(minLength: 2, format: "not-blank")
2221 | description: String
2222 | url: String
2223 | hash: String
2224 | file: Upload
2225 | external_id: String
2226 | created: DateTime
2227 | modified: DateTime
2228 | clientMutationId: String
2229 | update: Boolean
2230 | }
2231 |
2232 | ############## KillChainPhases
2233 | enum KillChainPhasesOrdering {
2234 | x_opencti_order
2235 | kill_chain_name
2236 | phase_name
2237 | created
2238 | modified
2239 | created_at
2240 | updated_at
2241 | _score
2242 | }
2243 | type KillChainPhaseConnection {
2244 | pageInfo: PageInfo!
2245 | edges: [KillChainPhaseEdge!]!
2246 | }
2247 | type KillChainPhaseEdge {
2248 | cursor: String!
2249 | node: KillChainPhase!
2250 | }
2251 | type KillChainPhase implements BasicObject & StixObject & StixMetaObject {
2252 | id: ID! # internal_id
2253 | standard_id: String!
2254 | entity_type: String!
2255 | parent_types: [String]!
2256 | # StixObject
2257 | representative: Representative!
2258 | x_opencti_stix_ids: [StixId]
2259 | is_inferred: Boolean!
2260 | spec_version: String!
2261 | created_at: DateTime!
2262 | updated_at: DateTime!
2263 | draftVersion: DraftVersion
2264 | # inferences
2265 | x_opencti_inferences: [Inference]
2266 | # StixMetaObject
2267 | created: DateTime
2268 | modified: DateTime
2269 | # KillChainPhase
2270 | kill_chain_name: String!
2271 | phase_name: String!
2272 | x_opencti_order: Int
2273 | # Technical
2274 | creators: [Creator!]
2275 | editContext: [EditUserContext!]
2276 | }
2277 | input KillChainPhaseAddInput {
2278 | stix_id: StixId
2279 | x_opencti_stix_ids: [StixId]
2280 | kill_chain_name: String!
2281 | phase_name: String!
2282 | x_opencti_order: Int!
2283 | created: DateTime
2284 | modified: DateTime
2285 | clientMutationId: String
2286 | update: Boolean
2287 | }
2288 |
2289 | ######## STIX CORE OBJECT ENTITIES
2290 |
2291 | type Representative {
2292 | main: String!
2293 | secondary: String
2294 | }
2295 |
2296 | enum StixCoreObjectsOrdering {
2297 | name
2298 | entity_type
2299 | created
2300 | modified
2301 | created_at
2302 | updated_at
2303 | start_time
2304 | stop_time
2305 | published
2306 | valid_from
2307 | valid_until
2308 | first_seen
2309 | last_seen
2310 | indicator_pattern
2311 | x_opencti_workflow_id
2312 | createdBy
2313 | creator
2314 | objectMarking
2315 | observable_value
2316 | subject
2317 | value
2318 | opinions_metrics_mean
2319 | opinions_metrics_min
2320 | opinions_metrics_max
2321 | opinions_metrics_total
2322 | _score
2323 | }
2324 | type StixCoreObjectConnection {
2325 | pageInfo: PageInfo!
2326 | edges: [StixCoreObjectEdge!]!
2327 | }
2328 | type StixCoreObjectEdge {
2329 | cursor: String!
2330 | node: StixCoreObject!
2331 | }
2332 | union OrganizationOrIndividual = Organization | Individual
2333 | interface StixCoreObject {
2334 | id: ID! # internal_id
2335 | standard_id: String!
2336 | entity_type: String!
2337 | parent_types: [String]!
2338 | # StixObject
2339 | representative: Representative!
2340 | x_opencti_stix_ids: [StixId]
2341 | is_inferred: Boolean!
2342 | spec_version: String!
2343 | created_at: DateTime!
2344 | updated_at: DateTime!
2345 | draftVersion: DraftVersion
2346 | # StixCoreObject
2347 | createdBy: Identity
2348 | numberOfConnectedElement: Int!
2349 | objectMarking: [MarkingDefinition!]
2350 | objectOrganization: [Organization!]
2351 | objectLabel: [Label!]
2352 | externalReferences(first: Int): ExternalReferenceConnection
2353 | containersNumber: Number
2354 | containers(first: Int, entityTypes: [String!]): ContainerConnection
2355 | reports(first: Int): ReportConnection
2356 | notes(first: Int): NoteConnection
2357 | opinions(first: Int): OpinionConnection
2358 | observedData(first: Int): ObservedDataConnection
2359 | groupings(first: Int): GroupingConnection
2360 | cases(first: Int): CaseConnection
2361 | stixCoreRelationships(
2362 | first: Int
2363 | after: ID
2364 | orderBy: StixCoreRelationshipsOrdering
2365 | orderMode: OrderingMode
2366 | fromId: StixRef
2367 | toId: StixRef
2368 | fromTypes: [String]
2369 | toTypes: [String]
2370 | relationship_type: String
2371 | startTimeStart: DateTime
2372 | startTimeStop: DateTime
2373 | stopTimeStart: DateTime
2374 | stopTimeStop: DateTime
2375 | firstSeenStart: DateTime
2376 | firstSeenStop: DateTime
2377 | lastSeenStart: DateTime
2378 | lastSeenStop: DateTime
2379 | confidences: [Int]
2380 | search: String
2381 | filters: FilterGroup
2382 | ): StixCoreRelationshipConnection
2383 | stixCoreObjectsDistribution(
2384 | relationship_type: [String]
2385 | toTypes: [String]
2386 | field: String!
2387 | startDate: DateTime
2388 | endDate: DateTime
2389 | dateAttribute: String
2390 | operation: StatsOperation!
2391 | limit: Int
2392 | order: String
2393 | types: [String]
2394 | filters: FilterGroup
2395 | search: String
2396 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
2397 | stixCoreRelationshipsDistribution(
2398 | field: String!
2399 | operation: StatsOperation!
2400 | startDate: DateTime
2401 | endDate: DateTime
2402 | dateAttribute: String
2403 | isTo: Boolean
2404 | limit: Int
2405 | order: String
2406 | elementWithTargetTypes: [String]
2407 | fromId: [String]
2408 | fromRole: String
2409 | fromTypes: [String]
2410 | toId: [String]
2411 | toRole: String
2412 | toTypes: [String]
2413 | relationship_type: [String]
2414 | confidences: [Int]
2415 | search: String
2416 | filters: FilterGroup
2417 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
2418 | # Technical
2419 | creators: [Creator!]
2420 | toStix: String
2421 | importFiles(
2422 | first: Int
2423 | prefixMimeType: String
2424 | after: ID
2425 | orderBy: FileOrdering
2426 | orderMode: OrderingMode
2427 | search: String
2428 | filters: FilterGroup
2429 | ): FileConnection
2430 | pendingFiles(
2431 | first: Int
2432 | after: ID
2433 | orderBy: FileOrdering
2434 | orderMode: OrderingMode
2435 | search: String
2436 | filters: FilterGroup
2437 | ): FileConnection
2438 | exportFiles(first: Int): FileConnection
2439 | editContext: [EditUserContext!]
2440 | connectors(onlyAlive: Boolean): [Connector]
2441 | jobs(first: Int): [Work]
2442 | opinions_metrics: OpinionsMetrics
2443 | }
2444 |
2445 | ########## STIX DOMAIN OBJECT ENTITIES
2446 |
2447 | enum StixDomainObjectsOrdering {
2448 | name
2449 | entity_type
2450 | created
2451 | modified
2452 | created_at
2453 | updated_at
2454 | published
2455 | valid_from
2456 | valid_until
2457 | indicator_pattern
2458 | x_opencti_workflow_id
2459 | createdBy
2460 | creator
2461 | objectMarking
2462 | _score
2463 | first_seen
2464 | last_seen
2465 | attribute_count
2466 | x_opencti_negative
2467 | confidence
2468 | first_observed
2469 | last_observed
2470 | number_observed
2471 | incident_type
2472 | severity
2473 | priority
2474 | rating
2475 | context
2476 | attribute_abstract
2477 | opinion
2478 | pattern_type
2479 | report_types
2480 | note_types
2481 | channel_types
2482 | x_opencti_base_severity
2483 | event_types
2484 | x_opencti_organization_type
2485 | submitted
2486 | product
2487 | result_name
2488 | operatingSystem
2489 | x_opencti_cvss_base_severity
2490 | }
2491 | type StixDomainObjectConnection {
2492 | pageInfo: PageInfo!
2493 | edges: [StixDomainObjectEdge]
2494 | }
2495 | type StixDomainObjectEdge {
2496 | cursor: String!
2497 | node: StixDomainObject!
2498 | }
2499 | interface StixDomainObject {
2500 | id: ID! # internal_id
2501 | standard_id: String!
2502 | entity_type: String!
2503 | parent_types: [String]!
2504 | # StixObject
2505 | representative: Representative!
2506 | x_opencti_stix_ids: [StixId]
2507 | is_inferred: Boolean!
2508 | spec_version: String!
2509 | created_at: DateTime!
2510 | updated_at: DateTime!
2511 | draftVersion: DraftVersion
2512 | # StixCoreObject
2513 | createdBy: Identity
2514 | numberOfConnectedElement: Int!
2515 | objectMarking: [MarkingDefinition!]
2516 | objectOrganization: [Organization!]
2517 | objectLabel: [Label!]
2518 | externalReferences(first: Int): ExternalReferenceConnection
2519 | containersNumber: Number
2520 | containers(first: Int, entityTypes: [String!]): ContainerConnection
2521 | reports(first: Int): ReportConnection
2522 | notes(first: Int): NoteConnection
2523 | opinions(first: Int): OpinionConnection
2524 | observedData(first: Int): ObservedDataConnection
2525 | groupings(first: Int): GroupingConnection
2526 | cases(first: Int): CaseConnection
2527 | stixCoreRelationships(
2528 | first: Int
2529 | after: ID
2530 | orderBy: StixCoreRelationshipsOrdering
2531 | orderMode: OrderingMode
2532 | fromId: StixRef
2533 | toId: StixRef
2534 | fromTypes: [String]
2535 | toTypes: [String]
2536 | relationship_type: String
2537 | startTimeStart: DateTime
2538 | startTimeStop: DateTime
2539 | stopTimeStart: DateTime
2540 | stopTimeStop: DateTime
2541 | firstSeenStart: DateTime
2542 | firstSeenStop: DateTime
2543 | lastSeenStart: DateTime
2544 | lastSeenStop: DateTime
2545 | confidences: [Int]
2546 | search: String
2547 | filters: FilterGroup
2548 | ): StixCoreRelationshipConnection
2549 | stixCoreObjectsDistribution(
2550 | relationship_type: [String]
2551 | toTypes: [String]
2552 | field: String!
2553 | startDate: DateTime
2554 | endDate: DateTime
2555 | dateAttribute: String
2556 | operation: StatsOperation!
2557 | limit: Int
2558 | order: String
2559 | types: [String]
2560 | filters: FilterGroup
2561 | search: String
2562 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
2563 | stixCoreRelationshipsDistribution(
2564 | field: String!
2565 | operation: StatsOperation!
2566 | startDate: DateTime
2567 | endDate: DateTime
2568 | dateAttribute: String
2569 | isTo: Boolean
2570 | limit: Int
2571 | order: String
2572 | elementWithTargetTypes: [String]
2573 | fromId: [String]
2574 | fromRole: String
2575 | fromTypes: [String]
2576 | toId: [String]
2577 | toRole: String
2578 | toTypes: [String]
2579 | relationship_type: [String]
2580 | confidences: [Int]
2581 | search: String
2582 | filters: FilterGroup
2583 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
2584 | opinions_metrics: OpinionsMetrics
2585 | # StixDomainObject
2586 | revoked: Boolean!
2587 | confidence: Int
2588 | lang: String
2589 | created: DateTime
2590 | modified: DateTime
2591 | x_opencti_graph_data: String
2592 | objectAssignee: [Assignee!]
2593 | objectParticipant: [Participant!]
2594 | avatar: OpenCtiFile
2595 | # Technical
2596 | creators: [Creator!]
2597 | toStix: String
2598 | importFiles(
2599 | first: Int
2600 | prefixMimeType: String
2601 | after: ID
2602 | orderBy: FileOrdering
2603 | orderMode: OrderingMode
2604 | search: String
2605 | filters: FilterGroup
2606 | ): FileConnection
2607 | pendingFiles(
2608 | first: Int
2609 | after: ID
2610 | orderBy: FileOrdering
2611 | orderMode: OrderingMode
2612 | search: String
2613 | filters: FilterGroup
2614 | ): FileConnection
2615 | exportFiles(first: Int): FileConnection
2616 | editContext: [EditUserContext!]
2617 | connectors(onlyAlive: Boolean): [Connector]
2618 | jobs(first: Int): [Work]
2619 | status: Status
2620 | workflowEnabled: Boolean
2621 | }
2622 | input StixDomainObjectAddInput {
2623 | stix_id: StixId
2624 | x_opencti_stix_ids: [StixId]
2625 | name: String! @constraint(minLength: 2, format: "not-blank")
2626 | description: String
2627 | confidence: Int
2628 | pattern_type: String
2629 | context: String
2630 | pattern: String
2631 | aliases: [String]
2632 | x_opencti_aliases: [String]
2633 | type: String!
2634 | createdBy: String
2635 | objectMarking: [String]
2636 | objectLabel: [String]
2637 | killChainPhases: [String]
2638 | externalReferences: [String]
2639 | objects: [String]
2640 | clientMutationId: String
2641 | created: DateTime
2642 | modified: DateTime
2643 | update: Boolean
2644 | }
2645 |
2646 | ############## AttackPatterns
2647 | enum AttackPatternsOrdering {
2648 | x_mitre_id
2649 | name
2650 | created
2651 | modified
2652 | created_at
2653 | updated_at
2654 | x_opencti_workflow_id
2655 | _score
2656 | }
2657 | type AttackPatternConnection {
2658 | pageInfo: PageInfo!
2659 | edges: [AttackPatternEdge!]!
2660 | }
2661 | type AttackPatternEdge {
2662 | cursor: String!
2663 | node: AttackPattern!
2664 | }
2665 | type AttackPattern implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
2666 | id: ID! # internal_id
2667 | standard_id: String!
2668 | entity_type: String!
2669 | parent_types: [String]!
2670 | # StixObject
2671 | representative: Representative!
2672 | x_opencti_stix_ids: [StixId]
2673 | is_inferred: Boolean!
2674 | spec_version: String!
2675 | created_at: DateTime!
2676 | updated_at: DateTime!
2677 | draftVersion: DraftVersion
2678 | # inferences
2679 | x_opencti_inferences: [Inference]
2680 | # StixCoreObject
2681 | createdBy: Identity
2682 | numberOfConnectedElement: Int!
2683 | objectMarking: [MarkingDefinition!]
2684 | objectOrganization: [Organization!]
2685 | objectLabel: [Label!]
2686 | externalReferences(first: Int): ExternalReferenceConnection
2687 | containersNumber: Number
2688 | containers(first: Int, entityTypes: [String!]): ContainerConnection
2689 | reports(first: Int): ReportConnection
2690 | notes(first: Int): NoteConnection
2691 | opinions(first: Int): OpinionConnection
2692 | observedData(first: Int): ObservedDataConnection
2693 | groupings(first: Int): GroupingConnection
2694 | cases(first: Int): CaseConnection
2695 | stixCoreRelationships(
2696 | first: Int
2697 | after: ID
2698 | orderBy: StixCoreRelationshipsOrdering
2699 | orderMode: OrderingMode
2700 | fromId: StixRef
2701 | toId: StixRef
2702 | fromTypes: [String]
2703 | toTypes: [String]
2704 | relationship_type: String
2705 | startTimeStart: DateTime
2706 | startTimeStop: DateTime
2707 | stopTimeStart: DateTime
2708 | stopTimeStop: DateTime
2709 | firstSeenStart: DateTime
2710 | firstSeenStop: DateTime
2711 | lastSeenStart: DateTime
2712 | lastSeenStop: DateTime
2713 | confidences: [Int]
2714 | search: String
2715 | filters: FilterGroup
2716 | ): StixCoreRelationshipConnection
2717 | stixCoreObjectsDistribution(
2718 | relationship_type: [String]
2719 | toTypes: [String]
2720 | field: String!
2721 | startDate: DateTime
2722 | endDate: DateTime
2723 | dateAttribute: String
2724 | operation: StatsOperation!
2725 | limit: Int
2726 | order: String
2727 | types: [String]
2728 | filters: FilterGroup
2729 | search: String
2730 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
2731 | stixCoreRelationshipsDistribution(
2732 | field: String!
2733 | operation: StatsOperation!
2734 | startDate: DateTime
2735 | endDate: DateTime
2736 | dateAttribute: String
2737 | isTo: Boolean
2738 | limit: Int
2739 | order: String
2740 | elementWithTargetTypes: [String]
2741 | fromId: [String]
2742 | fromRole: String
2743 | fromTypes: [String]
2744 | toId: [String]
2745 | toRole: String
2746 | toTypes: [String]
2747 | relationship_type: [String]
2748 | confidences: [Int]
2749 | search: String
2750 | filters: FilterGroup
2751 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
2752 | opinions_metrics: OpinionsMetrics
2753 | # StixDomainObject
2754 | revoked: Boolean!
2755 | confidence: Int
2756 | lang: String
2757 | created: DateTime
2758 | modified: DateTime
2759 | x_opencti_graph_data: String
2760 | objectAssignee: [Assignee!]
2761 | objectParticipant: [Participant!]
2762 | avatar: OpenCtiFile
2763 | # AttackPattern
2764 | name: String!
2765 | description: String
2766 | aliases: [String]
2767 | x_mitre_platforms: [String!]
2768 | x_mitre_permissions_required: [String]
2769 | x_mitre_detection: String
2770 | x_mitre_id: String
2771 | killChainPhases: [KillChainPhase!]
2772 | coursesOfAction(
2773 | first: Int
2774 | after: ID
2775 | orderBy: CoursesOfActionOrdering
2776 | orderMode: OrderingMode
2777 | filters: FilterGroup
2778 | search: String
2779 | ): CourseOfActionConnection
2780 | parentAttackPatterns(
2781 | first: Int
2782 | after: ID
2783 | orderBy: AttackPatternsOrdering
2784 | orderMode: OrderingMode
2785 | filters: FilterGroup
2786 | search: String
2787 | ): AttackPatternConnection
2788 | subAttackPatterns(
2789 | first: Int
2790 | after: ID
2791 | orderBy: AttackPatternsOrdering
2792 | orderMode: OrderingMode
2793 | filters: FilterGroup
2794 | search: String
2795 | ): AttackPatternConnection
2796 | isSubAttackPattern: Boolean
2797 | dataComponents: DataComponentConnection # TODO paginate ? is this API used ?
2798 | # Technical
2799 | creators: [Creator!]
2800 | toStix: String
2801 | importFiles(
2802 | first: Int
2803 | prefixMimeType: String
2804 | after: ID
2805 | orderBy: FileOrdering
2806 | orderMode: OrderingMode
2807 | search: String
2808 | filters: FilterGroup
2809 | ): FileConnection
2810 | pendingFiles(
2811 | first: Int
2812 | after: ID
2813 | orderBy: FileOrdering
2814 | orderMode: OrderingMode
2815 | search: String
2816 | filters: FilterGroup
2817 | ): FileConnection
2818 | exportFiles(first: Int): FileConnection
2819 | editContext: [EditUserContext!]
2820 | connectors(onlyAlive: Boolean): [Connector]
2821 | jobs(first: Int): [Work]
2822 | status: Status
2823 | workflowEnabled: Boolean
2824 | }
2825 | input AttackPatternAddInput {
2826 | stix_id: StixId
2827 | x_opencti_stix_ids: [StixId]
2828 | name: String! @constraint(minLength: 2, format: "not-blank")
2829 | description: String
2830 | aliases: [String]
2831 | revoked: Boolean
2832 | lang: String
2833 | confidence: Int
2834 | x_mitre_platforms: [String!]
2835 | x_mitre_permissions_required: [String]
2836 | x_mitre_detection: String
2837 | x_mitre_id: String
2838 | createdBy: String
2839 | objectMarking: [String]
2840 | objectOrganization: [String]
2841 | objectLabel: [String]
2842 | killChainPhases: [String]
2843 | externalReferences: [String]
2844 | created: DateTime
2845 | modified: DateTime
2846 | x_opencti_workflow_id: String
2847 | clientMutationId: String
2848 | update: Boolean
2849 | file: Upload
2850 | }
2851 | type AttackPatternForMatrix {
2852 | attack_pattern_id: String!
2853 | name: String!
2854 | description: String
2855 | x_mitre_id: String
2856 | subAttackPatternsIds: [String!]
2857 | subAttackPatternsSearchText: String
2858 | killChainPhasesIds: [String!]
2859 | }
2860 | type AttackPatternsByKillChain {
2861 | kill_chain_id: String!
2862 | kill_chain_name: String!
2863 | phase_name: String!
2864 | x_opencti_order: Int!
2865 | attackPatterns: [AttackPatternForMatrix!]
2866 | }
2867 | type AttackPatternsMatrix {
2868 | attackPatternsOfPhases: [AttackPatternsByKillChain!]
2869 | }
2870 | ############## Campaigns
2871 | enum CampaignsOrdering {
2872 | name
2873 | first_seen
2874 | last_seen
2875 | role_played
2876 | created
2877 | modified
2878 | created_at
2879 | updated_at
2880 | objectMarking
2881 | x_opencti_workflow_id
2882 | confidence
2883 | _score
2884 | }
2885 | type CampaignConnection {
2886 | pageInfo: PageInfo!
2887 | edges: [CampaignEdge]
2888 | }
2889 | type CampaignEdge {
2890 | cursor: String!
2891 | node: Campaign!
2892 | }
2893 | type Campaign implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
2894 | id: ID! # internal_id
2895 | standard_id: String!
2896 | entity_type: String!
2897 | parent_types: [String]!
2898 | # StixObject
2899 | representative: Representative!
2900 | x_opencti_stix_ids: [StixId]
2901 | is_inferred: Boolean!
2902 | spec_version: String!
2903 | created_at: DateTime!
2904 | updated_at: DateTime!
2905 | draftVersion: DraftVersion
2906 | # inferences
2907 | x_opencti_inferences: [Inference]
2908 | # StixCoreObject
2909 | createdBy: Identity
2910 | numberOfConnectedElement: Int!
2911 | objectMarking: [MarkingDefinition!]
2912 | objectOrganization: [Organization!]
2913 | objectLabel: [Label!]
2914 | externalReferences(first: Int): ExternalReferenceConnection
2915 | containersNumber: Number
2916 | containers(first: Int, entityTypes: [String!]): ContainerConnection
2917 | reports(first: Int): ReportConnection
2918 | notes(first: Int): NoteConnection
2919 | opinions(first: Int): OpinionConnection
2920 | observedData(first: Int): ObservedDataConnection
2921 | groupings(first: Int): GroupingConnection
2922 | cases(first: Int): CaseConnection
2923 | stixCoreRelationships(
2924 | first: Int
2925 | after: ID
2926 | orderBy: StixCoreRelationshipsOrdering
2927 | orderMode: OrderingMode
2928 | fromId: StixRef
2929 | toId: StixRef
2930 | fromTypes: [String]
2931 | toTypes: [String]
2932 | relationship_type: String
2933 | startTimeStart: DateTime
2934 | startTimeStop: DateTime
2935 | stopTimeStart: DateTime
2936 | stopTimeStop: DateTime
2937 | firstSeenStart: DateTime
2938 | firstSeenStop: DateTime
2939 | lastSeenStart: DateTime
2940 | lastSeenStop: DateTime
2941 | confidences: [Int]
2942 | search: String
2943 | filters: FilterGroup
2944 | ): StixCoreRelationshipConnection
2945 | stixCoreObjectsDistribution(
2946 | relationship_type: [String]
2947 | toTypes: [String]
2948 | field: String!
2949 | startDate: DateTime
2950 | endDate: DateTime
2951 | dateAttribute: String
2952 | operation: StatsOperation!
2953 | limit: Int
2954 | order: String
2955 | types: [String]
2956 | filters: FilterGroup
2957 | search: String
2958 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
2959 | stixCoreRelationshipsDistribution(
2960 | field: String!
2961 | operation: StatsOperation!
2962 | startDate: DateTime
2963 | endDate: DateTime
2964 | dateAttribute: String
2965 | isTo: Boolean
2966 | limit: Int
2967 | order: String
2968 | elementWithTargetTypes: [String]
2969 | fromId: [String]
2970 | fromRole: String
2971 | fromTypes: [String]
2972 | toId: [String]
2973 | toRole: String
2974 | toTypes: [String]
2975 | relationship_type: [String]
2976 | confidences: [Int]
2977 | search: String
2978 | filters: FilterGroup
2979 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
2980 | opinions_metrics: OpinionsMetrics
2981 | # StixDomainObject
2982 | revoked: Boolean!
2983 | confidence: Int
2984 | lang: String
2985 | created: DateTime
2986 | modified: DateTime
2987 | x_opencti_graph_data: String
2988 | objectAssignee: [Assignee!]
2989 | objectParticipant: [Participant!]
2990 | avatar: OpenCtiFile
2991 | # Campaign
2992 | name: String!
2993 | description: String
2994 | aliases: [String]
2995 | first_seen: DateTime
2996 | last_seen: DateTime
2997 | objective: String
2998 | # Technical
2999 | creators: [Creator!]
3000 | toStix: String
3001 | importFiles(
3002 | first: Int
3003 | prefixMimeType: String
3004 | after: ID
3005 | orderBy: FileOrdering
3006 | orderMode: OrderingMode
3007 | search: String
3008 | filters: FilterGroup
3009 | ): FileConnection
3010 | pendingFiles(
3011 | first: Int
3012 | after: ID
3013 | orderBy: FileOrdering
3014 | orderMode: OrderingMode
3015 | search: String
3016 | filters: FilterGroup
3017 | ): FileConnection
3018 | exportFiles(first: Int): FileConnection
3019 | editContext: [EditUserContext!]
3020 | connectors(onlyAlive: Boolean): [Connector]
3021 | jobs(first: Int): [Work]
3022 | status: Status
3023 | workflowEnabled: Boolean
3024 | }
3025 | input CampaignAddInput {
3026 | stix_id: StixId
3027 | x_opencti_stix_ids: [StixId]
3028 | name: String! @constraint(minLength: 2, format: "not-blank")
3029 | description: String
3030 | aliases: [String]
3031 | revoked: Boolean
3032 | lang: String
3033 | confidence: Int
3034 | first_seen: DateTime
3035 | last_seen: DateTime
3036 | objective: String
3037 | createdBy: String
3038 | objectMarking: [String]
3039 | objectAssignee: [String]
3040 | objectOrganization: [String]
3041 | objectLabel: [String]
3042 | externalReferences: [String]
3043 | created: DateTime
3044 | modified: DateTime
3045 | x_opencti_workflow_id: String
3046 | clientMutationId: String
3047 | update: Boolean
3048 | file: Upload
3049 | }
3050 |
3051 | ############## Containers
3052 | enum ContainersOrdering {
3053 | name
3054 | published
3055 | created
3056 | modified
3057 | created_at
3058 | updated_at
3059 | createdBy
3060 | objectMarking
3061 | x_opencti_workflow_id
3062 | creator
3063 | entity_type
3064 | _score
3065 | }
3066 | type ContainerConnection {
3067 | pageInfo: PageInfo!
3068 | edges: [ContainerEdge]
3069 | }
3070 | type ContainerEdge {
3071 | cursor: String!
3072 | node: Container!
3073 | }
3074 | interface Container {
3075 | id: ID! # internal_id
3076 | standard_id: String!
3077 | entity_type: String!
3078 | parent_types: [String]!
3079 | # StixObject
3080 | representative: Representative!
3081 | x_opencti_stix_ids: [StixId]
3082 | is_inferred: Boolean!
3083 | spec_version: String!
3084 | created_at: DateTime!
3085 | updated_at: DateTime!
3086 | draftVersion: DraftVersion
3087 | # StixCoreObject
3088 | createdBy: Identity
3089 | numberOfConnectedElement: Int!
3090 | objectMarking: [MarkingDefinition!]
3091 | objectOrganization: [Organization!]
3092 | objectLabel: [Label!]
3093 | externalReferences(first: Int): ExternalReferenceConnection
3094 | containersNumber: Number
3095 | containers(first: Int, entityTypes: [String!]): ContainerConnection
3096 | reports(first: Int): ReportConnection
3097 | notes(first: Int): NoteConnection
3098 | opinions(first: Int): OpinionConnection
3099 | observedData(first: Int): ObservedDataConnection
3100 | groupings(first: Int): GroupingConnection
3101 | cases(first: Int): CaseConnection
3102 | stixCoreRelationships(
3103 | first: Int
3104 | after: ID
3105 | orderBy: StixCoreRelationshipsOrdering
3106 | orderMode: OrderingMode
3107 | fromId: StixRef
3108 | toId: StixRef
3109 | fromTypes: [String]
3110 | toTypes: [String]
3111 | relationship_type: String
3112 | startTimeStart: DateTime
3113 | startTimeStop: DateTime
3114 | stopTimeStart: DateTime
3115 | stopTimeStop: DateTime
3116 | firstSeenStart: DateTime
3117 | firstSeenStop: DateTime
3118 | lastSeenStart: DateTime
3119 | lastSeenStop: DateTime
3120 | confidences: [Int]
3121 | search: String
3122 | filters: FilterGroup
3123 | ): StixCoreRelationshipConnection
3124 | stixCoreObjectsDistribution(
3125 | relationship_type: [String]
3126 | toTypes: [String]
3127 | field: String!
3128 | startDate: DateTime
3129 | endDate: DateTime
3130 | dateAttribute: String
3131 | operation: StatsOperation!
3132 | limit: Int
3133 | order: String
3134 | types: [String]
3135 | filters: FilterGroup
3136 | search: String
3137 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3138 | stixCoreRelationshipsDistribution(
3139 | field: String!
3140 | operation: StatsOperation!
3141 | startDate: DateTime
3142 | endDate: DateTime
3143 | dateAttribute: String
3144 | isTo: Boolean
3145 | limit: Int
3146 | order: String
3147 | elementWithTargetTypes: [String]
3148 | fromId: [String]
3149 | fromRole: String
3150 | fromTypes: [String]
3151 | toId: [String]
3152 | toRole: String
3153 | toTypes: [String]
3154 | relationship_type: [String]
3155 | confidences: [Int]
3156 | search: String
3157 | filters: FilterGroup
3158 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3159 | opinions_metrics: OpinionsMetrics
3160 | # StixDomainObject
3161 | revoked: Boolean!
3162 | confidence: Int
3163 | lang: String
3164 | created: DateTime
3165 | modified: DateTime
3166 | x_opencti_graph_data: String
3167 | objectAssignee: [Assignee!]
3168 | avatar: OpenCtiFile
3169 | # Container
3170 | authorized_members: [MemberAccess!]
3171 | currentUserAccessRight: String
3172 | objects(
3173 | first: Int
3174 | after: ID
3175 | orderBy: StixObjectOrStixRelationshipsOrdering
3176 | orderMode: OrderingMode
3177 | filters: FilterGroup
3178 | search: String
3179 | types: [String]
3180 | all: Boolean
3181 | ): StixObjectOrStixRelationshipRefConnection
3182 | relatedContainers(
3183 | first: Int
3184 | after: ID
3185 | orderBy: ContainersOrdering
3186 | orderMode: OrderingMode
3187 | filters: FilterGroup
3188 | search: String
3189 | types: [String]
3190 | viaTypes: [String]
3191 | ): ContainerConnection
3192 | contentsFromTemplate(
3193 | first: Int
3194 | prefixMimeType: String
3195 | after: ID
3196 | orderBy: FileOrdering
3197 | orderMode: OrderingMode
3198 | search: String
3199 | filters: FilterGroup
3200 | ): FileConnection
3201 | templates: [Template!]
3202 | templateAndUtils(
3203 | templateId: String!
3204 | ): TemplateAndUtils
3205 | # Technical
3206 | creators: [Creator!]
3207 | workflowEnabled: Boolean
3208 | status: Status
3209 | }
3210 |
3211 | ################ Notes
3212 | enum NotesOrdering {
3213 | attribute_abstract
3214 | created
3215 | modified
3216 | created_at
3217 | updated_at
3218 | createdBy
3219 | x_opencti_workflow_id
3220 | objectMarking
3221 | note_types
3222 | creator
3223 | _score
3224 | }
3225 | type NoteConnection {
3226 | pageInfo: PageInfo!
3227 | edges: [NoteEdge!]!
3228 | }
3229 | type NoteEdge {
3230 | cursor: String!
3231 | node: Note!
3232 | }
3233 | type Note implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Container {
3234 | id: ID! # internal_id
3235 | standard_id: String!
3236 | entity_type: String!
3237 | parent_types: [String]!
3238 | # StixObject
3239 | representative: Representative!
3240 | x_opencti_stix_ids: [StixId]
3241 | is_inferred: Boolean!
3242 | spec_version: String!
3243 | created_at: DateTime!
3244 | updated_at: DateTime!
3245 | draftVersion: DraftVersion
3246 | # inferences
3247 | x_opencti_inferences: [Inference]
3248 | # StixCoreObject
3249 | createdBy: Identity
3250 | numberOfConnectedElement: Int!
3251 | objectMarking: [MarkingDefinition!]
3252 | objectOrganization: [Organization!]
3253 | objectLabel: [Label!]
3254 | externalReferences(first: Int): ExternalReferenceConnection
3255 | containersNumber: Number
3256 | containers(first: Int, entityTypes: [String!]): ContainerConnection
3257 | reports(first: Int): ReportConnection
3258 | notes(first: Int): NoteConnection
3259 | opinions(first: Int): OpinionConnection
3260 | observedData(first: Int): ObservedDataConnection
3261 | groupings(first: Int): GroupingConnection
3262 | cases(first: Int): CaseConnection
3263 | stixCoreRelationships(
3264 | first: Int
3265 | after: ID
3266 | orderBy: StixCoreRelationshipsOrdering
3267 | orderMode: OrderingMode
3268 | fromId: StixRef
3269 | toId: StixRef
3270 | fromTypes: [String]
3271 | toTypes: [String]
3272 | relationship_type: String
3273 | startTimeStart: DateTime
3274 | startTimeStop: DateTime
3275 | stopTimeStart: DateTime
3276 | stopTimeStop: DateTime
3277 | firstSeenStart: DateTime
3278 | firstSeenStop: DateTime
3279 | lastSeenStart: DateTime
3280 | lastSeenStop: DateTime
3281 | confidences: [Int]
3282 | search: String
3283 | filters: FilterGroup
3284 | ): StixCoreRelationshipConnection
3285 | stixCoreObjectsDistribution(
3286 | relationship_type: [String]
3287 | toTypes: [String]
3288 | field: String!
3289 | startDate: DateTime
3290 | endDate: DateTime
3291 | dateAttribute: String
3292 | operation: StatsOperation!
3293 | limit: Int
3294 | order: String
3295 | types: [String]
3296 | filters: FilterGroup
3297 | search: String
3298 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3299 | stixCoreRelationshipsDistribution(
3300 | field: String!
3301 | operation: StatsOperation!
3302 | startDate: DateTime
3303 | endDate: DateTime
3304 | dateAttribute: String
3305 | isTo: Boolean
3306 | limit: Int
3307 | order: String
3308 | elementWithTargetTypes: [String]
3309 | fromId: [String]
3310 | fromRole: String
3311 | fromTypes: [String]
3312 | toId: [String]
3313 | toRole: String
3314 | toTypes: [String]
3315 | relationship_type: [String]
3316 | confidences: [Int]
3317 | search: String
3318 | filters: FilterGroup
3319 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3320 | opinions_metrics: OpinionsMetrics
3321 | # StixDomainObject
3322 | revoked: Boolean!
3323 | confidence: Int
3324 | lang: String
3325 | created: DateTime
3326 | modified: DateTime
3327 | x_opencti_graph_data: String
3328 | objectAssignee: [Assignee!]
3329 | objectParticipant: [Participant!]
3330 | avatar: OpenCtiFile
3331 | # Container
3332 | authorized_members: [MemberAccess!]
3333 | currentUserAccessRight: String
3334 | objects(
3335 | first: Int
3336 | after: ID
3337 | orderBy: StixObjectOrStixRelationshipsOrdering
3338 | orderMode: OrderingMode
3339 | filters: FilterGroup
3340 | search: String
3341 | types: [String]
3342 | all: Boolean
3343 | ): StixObjectOrStixRelationshipRefConnection
3344 | relatedContainers(
3345 | first: Int
3346 | after: ID
3347 | orderBy: ContainersOrdering
3348 | orderMode: OrderingMode
3349 | filters: FilterGroup
3350 | search: String
3351 | types: [String]
3352 | viaTypes: [String]
3353 | ): ContainerConnection
3354 | # Note
3355 | attribute_abstract: String
3356 | content: String!
3357 | authors: [String]
3358 | note_types: [String]
3359 | likelihood: Int
3360 | # Technical
3361 | creators: [Creator!]
3362 | toStix: String
3363 | importFiles(
3364 | first: Int
3365 | prefixMimeType: String
3366 | after: ID
3367 | orderBy: FileOrdering
3368 | orderMode: OrderingMode
3369 | search: String
3370 | filters: FilterGroup
3371 | ): FileConnection
3372 | pendingFiles(
3373 | first: Int
3374 | after: ID
3375 | orderBy: FileOrdering
3376 | orderMode: OrderingMode
3377 | search: String
3378 | filters: FilterGroup
3379 | ): FileConnection
3380 | contentsFromTemplate(
3381 | first: Int
3382 | prefixMimeType: String
3383 | after: ID
3384 | orderBy: FileOrdering
3385 | orderMode: OrderingMode
3386 | search: String
3387 | filters: FilterGroup
3388 | ): FileConnection
3389 | templates: [Template!]
3390 | templateAndUtils(
3391 | templateId: String!
3392 | ): TemplateAndUtils
3393 | exportFiles(first: Int): FileConnection
3394 | editContext: [EditUserContext!]
3395 | connectors(onlyAlive: Boolean): [Connector]
3396 | jobs(first: Int): [Work]
3397 | status: Status
3398 | workflowEnabled: Boolean
3399 | }
3400 | input NoteAddInput {
3401 | stix_id: StixId
3402 | x_opencti_stix_ids: [StixId]
3403 | attribute_abstract: String
3404 | content: String! @constraint(minLength: 2)
3405 | authors: [String]
3406 | note_types: [String]
3407 | likelihood: Int
3408 | revoked: Boolean
3409 | lang: String
3410 | createdBy: String
3411 | confidence: Int
3412 | objectMarking: [String]
3413 | objectLabel: [String]
3414 | objectOrganization: [String]
3415 | externalReferences: [String]
3416 | objects: [String]
3417 | created: DateTime
3418 | modified: DateTime
3419 | x_opencti_workflow_id: String
3420 | clientMutationId: String
3421 | update: Boolean
3422 | file: Upload
3423 | }
3424 | input NoteUserAddInput {
3425 | stix_id: String
3426 | x_opencti_stix_ids: [String]
3427 | attribute_abstract: String
3428 | content: String! @constraint(minLength: 2)
3429 | note_types: [String]
3430 | likelihood: Int
3431 | revoked: Boolean
3432 | lang: String
3433 | confidence: Int
3434 | objectMarking: [String]
3435 | objectLabel: [String]
3436 | objectOrganization: [String]
3437 | externalReferences: [String]
3438 | objects: [String]
3439 | created: DateTime
3440 | modified: DateTime
3441 | clientMutationId: String
3442 | update: Boolean
3443 | }
3444 |
3445 | ################ ObservedDatas
3446 | enum ObservedDatasOrdering {
3447 | first_observed
3448 | last_observed
3449 | number_observed
3450 | created
3451 | modified
3452 | created_at
3453 | updated_at
3454 | createdBy
3455 | x_opencti_workflow_id
3456 | objectMarking
3457 | confidence
3458 | _score
3459 | }
3460 | type ObservedDataConnection {
3461 | pageInfo: PageInfo!
3462 | edges: [ObservedDataEdge]
3463 | }
3464 | type ObservedDataEdge {
3465 | cursor: String!
3466 | node: ObservedData!
3467 | }
3468 | type ObservedData implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Container {
3469 | id: ID! # internal_id
3470 | standard_id: String!
3471 | entity_type: String!
3472 | parent_types: [String]!
3473 | # StixObject
3474 | representative: Representative!
3475 | x_opencti_stix_ids: [StixId]
3476 | is_inferred: Boolean!
3477 | spec_version: String!
3478 | created_at: DateTime!
3479 | updated_at: DateTime!
3480 | draftVersion: DraftVersion
3481 | # inferences
3482 | x_opencti_inferences: [Inference]
3483 | # StixCoreObject
3484 | createdBy: Identity
3485 | numberOfConnectedElement: Int!
3486 | objectMarking: [MarkingDefinition!]
3487 | objectOrganization: [Organization!]
3488 | objectLabel: [Label!]
3489 | externalReferences(first: Int): ExternalReferenceConnection
3490 | containersNumber: Number
3491 | containers(first: Int, entityTypes: [String!]): ContainerConnection
3492 | reports(first: Int): ReportConnection
3493 | notes(first: Int): NoteConnection
3494 | opinions(first: Int): OpinionConnection
3495 | observedData(first: Int): ObservedDataConnection
3496 | groupings(first: Int): GroupingConnection
3497 | cases(first: Int): CaseConnection
3498 | stixCoreRelationships(
3499 | first: Int
3500 | after: ID
3501 | orderBy: StixCoreRelationshipsOrdering
3502 | orderMode: OrderingMode
3503 | fromId: StixRef
3504 | toId: StixRef
3505 | fromTypes: [String]
3506 | toTypes: [String]
3507 | relationship_type: String
3508 | startTimeStart: DateTime
3509 | startTimeStop: DateTime
3510 | stopTimeStart: DateTime
3511 | stopTimeStop: DateTime
3512 | firstSeenStart: DateTime
3513 | firstSeenStop: DateTime
3514 | lastSeenStart: DateTime
3515 | lastSeenStop: DateTime
3516 | confidences: [Int]
3517 | search: String
3518 | filters: FilterGroup
3519 | ): StixCoreRelationshipConnection
3520 | stixCoreObjectsDistribution(
3521 | relationship_type: [String]
3522 | toTypes: [String]
3523 | field: String!
3524 | startDate: DateTime
3525 | endDate: DateTime
3526 | dateAttribute: String
3527 | operation: StatsOperation!
3528 | limit: Int
3529 | order: String
3530 | types: [String]
3531 | filters: FilterGroup
3532 | search: String
3533 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3534 | stixCoreRelationshipsDistribution(
3535 | field: String!
3536 | operation: StatsOperation!
3537 | startDate: DateTime
3538 | endDate: DateTime
3539 | dateAttribute: String
3540 | isTo: Boolean
3541 | limit: Int
3542 | order: String
3543 | elementWithTargetTypes: [String]
3544 | fromId: [String]
3545 | fromRole: String
3546 | fromTypes: [String]
3547 | toId: [String]
3548 | toRole: String
3549 | toTypes: [String]
3550 | relationship_type: [String]
3551 | confidences: [Int]
3552 | search: String
3553 | filters: FilterGroup
3554 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3555 | opinions_metrics: OpinionsMetrics
3556 | # StixDomainObject
3557 | revoked: Boolean!
3558 | confidence: Int
3559 | lang: String
3560 | created: DateTime
3561 | modified: DateTime
3562 | x_opencti_graph_data: String
3563 | objectAssignee: [Assignee!]
3564 | objectParticipant: [Participant!]
3565 | avatar: OpenCtiFile
3566 | # Container
3567 | authorized_members: [MemberAccess!]
3568 | currentUserAccessRight: String
3569 | objects(
3570 | first: Int
3571 | after: ID
3572 | orderBy: StixObjectOrStixRelationshipsOrdering
3573 | orderMode: OrderingMode
3574 | filters: FilterGroup
3575 | search: String
3576 | types: [String]
3577 | all: Boolean
3578 | ): StixObjectOrStixRelationshipRefConnection
3579 | relatedContainers(
3580 | first: Int
3581 | after: ID
3582 | orderBy: ContainersOrdering
3583 | orderMode: OrderingMode
3584 | filters: FilterGroup
3585 | search: String
3586 | types: [String]
3587 | viaTypes: [String]
3588 | ): ContainerConnection
3589 | # ObservedData
3590 | first_observed: DateTime!
3591 | last_observed: DateTime!
3592 | number_observed: Int!
3593 | name: String!
3594 | # Technical
3595 | creators: [Creator!]
3596 | toStix: String
3597 | importFiles(
3598 | first: Int
3599 | prefixMimeType: String
3600 | after: ID
3601 | orderBy: FileOrdering
3602 | orderMode: OrderingMode
3603 | search: String
3604 | filters: FilterGroup
3605 | ): FileConnection
3606 | pendingFiles(
3607 | first: Int
3608 | after: ID
3609 | orderBy: FileOrdering
3610 | orderMode: OrderingMode
3611 | search: String
3612 | filters: FilterGroup
3613 | ): FileConnection
3614 | contentsFromTemplate(
3615 | first: Int
3616 | prefixMimeType: String
3617 | after: ID
3618 | orderBy: FileOrdering
3619 | orderMode: OrderingMode
3620 | search: String
3621 | filters: FilterGroup
3622 | ): FileConnection
3623 | templates: [Template!]
3624 | templateAndUtils(
3625 | templateId: String!
3626 | ): TemplateAndUtils
3627 | exportFiles(first: Int): FileConnection
3628 | editContext: [EditUserContext!]
3629 | connectors(onlyAlive: Boolean): [Connector]
3630 | jobs(first: Int): [Work]
3631 | status: Status
3632 | workflowEnabled: Boolean
3633 | }
3634 | input ObservedDataAddInput {
3635 | stix_id: StixId
3636 | x_opencti_stix_ids: [StixId]
3637 | first_observed: DateTime!
3638 | last_observed: DateTime!
3639 | number_observed: Int!
3640 | revoked: Boolean
3641 | lang: String
3642 | confidence: Int
3643 | createdBy: String
3644 | objectMarking: [String]
3645 | objectLabel: [String]
3646 | objectOrganization: [String]
3647 | externalReferences: [String]
3648 | objects: [String]!
3649 | created: DateTime
3650 | modified: DateTime
3651 | x_opencti_workflow_id: String
3652 | clientMutationId: String
3653 | update: Boolean
3654 | file: Upload
3655 | }
3656 |
3657 | ################ Opinions
3658 | enum OpinionsOrdering {
3659 | opinion
3660 | created
3661 | modified
3662 | created_at
3663 | updated_at
3664 | createdBy
3665 | objectMarking
3666 | x_opencti_workflow_id
3667 | confidence
3668 | creator
3669 | _score
3670 | }
3671 | type OpinionConnection {
3672 | pageInfo: PageInfo!
3673 | edges: [OpinionEdge]
3674 | }
3675 | type OpinionEdge {
3676 | cursor: String!
3677 | node: Opinion!
3678 | }
3679 | type Opinion implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Container {
3680 | id: ID! # internal_id
3681 | standard_id: String!
3682 | entity_type: String!
3683 | parent_types: [String]!
3684 | # StixObject
3685 | representative: Representative!
3686 | x_opencti_stix_ids: [StixId]
3687 | is_inferred: Boolean!
3688 | spec_version: String!
3689 | created_at: DateTime!
3690 | updated_at: DateTime!
3691 | draftVersion: DraftVersion
3692 | # inferences
3693 | x_opencti_inferences: [Inference]
3694 | # StixCoreObject
3695 | createdBy: Identity
3696 | numberOfConnectedElement: Int!
3697 | objectMarking: [MarkingDefinition!]
3698 | objectOrganization: [Organization!]
3699 | objectLabel: [Label!]
3700 | externalReferences(first: Int): ExternalReferenceConnection
3701 | containersNumber: Number
3702 | containers(first: Int, entityTypes: [String!]): ContainerConnection
3703 | reports(first: Int): ReportConnection
3704 | notes(first: Int): NoteConnection
3705 | opinions(first: Int): OpinionConnection
3706 | observedData(first: Int): ObservedDataConnection
3707 | groupings(first: Int): GroupingConnection
3708 | cases(first: Int): CaseConnection
3709 | stixCoreRelationships(
3710 | first: Int
3711 | after: ID
3712 | orderBy: StixCoreRelationshipsOrdering
3713 | orderMode: OrderingMode
3714 | fromId: StixRef
3715 | toId: StixRef
3716 | fromTypes: [String]
3717 | toTypes: [String]
3718 | relationship_type: String
3719 | startTimeStart: DateTime
3720 | startTimeStop: DateTime
3721 | stopTimeStart: DateTime
3722 | stopTimeStop: DateTime
3723 | firstSeenStart: DateTime
3724 | firstSeenStop: DateTime
3725 | lastSeenStart: DateTime
3726 | lastSeenStop: DateTime
3727 | confidences: [Int]
3728 | search: String
3729 | filters: FilterGroup
3730 | ): StixCoreRelationshipConnection
3731 | stixCoreObjectsDistribution(
3732 | relationship_type: [String]
3733 | toTypes: [String]
3734 | field: String!
3735 | startDate: DateTime
3736 | endDate: DateTime
3737 | dateAttribute: String
3738 | operation: StatsOperation!
3739 | limit: Int
3740 | order: String
3741 | types: [String]
3742 | filters: FilterGroup
3743 | search: String
3744 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3745 | stixCoreRelationshipsDistribution(
3746 | field: String!
3747 | operation: StatsOperation!
3748 | startDate: DateTime
3749 | endDate: DateTime
3750 | dateAttribute: String
3751 | isTo: Boolean
3752 | limit: Int
3753 | order: String
3754 | elementWithTargetTypes: [String]
3755 | fromId: [String]
3756 | fromRole: String
3757 | fromTypes: [String]
3758 | toId: [String]
3759 | toRole: String
3760 | toTypes: [String]
3761 | relationship_type: [String]
3762 | confidences: [Int]
3763 | search: String
3764 | filters: FilterGroup
3765 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3766 | opinions_metrics: OpinionsMetrics
3767 | # StixDomainObject
3768 | revoked: Boolean!
3769 | confidence: Int
3770 | lang: String
3771 | created: DateTime
3772 | modified: DateTime
3773 | x_opencti_graph_data: String
3774 | objectAssignee: [Assignee!]
3775 | objectParticipant: [Participant!]
3776 | avatar: OpenCtiFile
3777 | # Container
3778 | authorized_members: [MemberAccess!]
3779 | currentUserAccessRight: String
3780 | objects(
3781 | first: Int
3782 | after: ID
3783 | orderBy: StixObjectOrStixRelationshipsOrdering
3784 | orderMode: OrderingMode
3785 | filters: FilterGroup
3786 | search: String
3787 | types: [String]
3788 | all: Boolean
3789 | ): StixObjectOrStixRelationshipRefConnection
3790 | relatedContainers(
3791 | first: Int
3792 | after: ID
3793 | orderBy: ContainersOrdering
3794 | orderMode: OrderingMode
3795 | filters: FilterGroup
3796 | search: String
3797 | types: [String]
3798 | viaTypes: [String]
3799 | ): ContainerConnection
3800 | # Opinion
3801 | explanation: String
3802 | authors: [String]
3803 | opinion: String!
3804 | # Technical
3805 | creators: [Creator!]
3806 | toStix: String
3807 | importFiles(
3808 | first: Int
3809 | prefixMimeType: String
3810 | after: ID
3811 | orderBy: FileOrdering
3812 | orderMode: OrderingMode
3813 | search: String
3814 | filters: FilterGroup
3815 | ): FileConnection
3816 | pendingFiles(
3817 | first: Int
3818 | after: ID
3819 | orderBy: FileOrdering
3820 | orderMode: OrderingMode
3821 | search: String
3822 | filters: FilterGroup
3823 | ): FileConnection
3824 | contentsFromTemplate(
3825 | first: Int
3826 | prefixMimeType: String
3827 | after: ID
3828 | orderBy: FileOrdering
3829 | orderMode: OrderingMode
3830 | search: String
3831 | filters: FilterGroup
3832 | ): FileConnection
3833 | templates: [Template!]
3834 | templateAndUtils(
3835 | templateId: String!
3836 | ): TemplateAndUtils
3837 | exportFiles(first: Int): FileConnection
3838 | editContext: [EditUserContext!]
3839 | connectors(onlyAlive: Boolean): [Connector]
3840 | jobs(first: Int): [Work]
3841 | status: Status
3842 | workflowEnabled: Boolean
3843 | }
3844 | input OpinionAddInput {
3845 | stix_id: StixId
3846 | x_opencti_stix_ids: [StixId]
3847 | opinion: String! @constraint(minLength: 2)
3848 | explanation: String
3849 | authors: [String]
3850 | revoked: Boolean
3851 | lang: String
3852 | confidence: Int
3853 | createdBy: String
3854 | objectMarking: [String]
3855 | objectOrganization: [String]
3856 | objectLabel: [String]
3857 | externalReferences: [String]
3858 | objects: [String]
3859 | created: DateTime
3860 | modified: DateTime
3861 | update: Boolean
3862 | x_opencti_workflow_id: String
3863 | clientMutationId: String
3864 | file: Upload
3865 | }
3866 | input OpinionUserAddInput {
3867 | stix_id: String
3868 | x_opencti_stix_ids: [String]
3869 | opinion: String!
3870 | explanation: String
3871 | authors: [String]
3872 | revoked: Boolean
3873 | lang: String
3874 | confidence: Int
3875 | objectMarking: [String]
3876 | objectLabel: [String]
3877 | objectOrganization: [String]
3878 | externalReferences: [String]
3879 | objects: [String]
3880 | created: DateTime
3881 | modified: DateTime
3882 | update: Boolean
3883 | clientMutationId: String
3884 | }
3885 |
3886 | ################ Reports
3887 | enum ReportsOrdering {
3888 | name
3889 | created
3890 | modified
3891 | published
3892 | created_at
3893 | updated_at
3894 | createdBy
3895 | creator
3896 | objectMarking
3897 | report_types
3898 | x_opencti_workflow_id
3899 | _score
3900 | }
3901 | type ReportConnection {
3902 | pageInfo: PageInfo!
3903 | edges: [ReportEdge]
3904 | }
3905 | type ReportEdge {
3906 | cursor: String!
3907 | node: Report!
3908 | }
3909 | type Report implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Container {
3910 | id: ID! # internal_id
3911 | standard_id: String!
3912 | entity_type: String!
3913 | parent_types: [String]!
3914 | # StixObject
3915 | representative: Representative!
3916 | x_opencti_stix_ids: [StixId]
3917 | is_inferred: Boolean!
3918 | spec_version: String!
3919 | created_at: DateTime!
3920 | updated_at: DateTime!
3921 | draftVersion: DraftVersion
3922 | # inferences
3923 | x_opencti_inferences: [Inference]
3924 | # StixCoreObject
3925 | createdBy: Identity
3926 | numberOfConnectedElement: Int!
3927 | objectMarking: [MarkingDefinition!]
3928 | objectOrganization: [Organization!]
3929 | objectLabel: [Label!]
3930 | externalReferences(first: Int): ExternalReferenceConnection
3931 | containersNumber: Number
3932 | containers(first: Int, entityTypes: [String!]): ContainerConnection
3933 | reports(first: Int): ReportConnection
3934 | notes(first: Int): NoteConnection
3935 | opinions(first: Int): OpinionConnection
3936 | observedData(first: Int): ObservedDataConnection
3937 | groupings(first: Int): GroupingConnection
3938 | cases(first: Int): CaseConnection
3939 | stixCoreRelationships(
3940 | first: Int
3941 | after: ID
3942 | orderBy: StixCoreRelationshipsOrdering
3943 | orderMode: OrderingMode
3944 | fromId: StixRef
3945 | toId: StixRef
3946 | fromTypes: [String]
3947 | toTypes: [String]
3948 | relationship_type: String
3949 | startTimeStart: DateTime
3950 | startTimeStop: DateTime
3951 | stopTimeStart: DateTime
3952 | stopTimeStop: DateTime
3953 | firstSeenStart: DateTime
3954 | firstSeenStop: DateTime
3955 | lastSeenStart: DateTime
3956 | lastSeenStop: DateTime
3957 | confidences: [Int]
3958 | search: String
3959 | filters: FilterGroup
3960 | ): StixCoreRelationshipConnection
3961 | stixCoreObjectsDistribution(
3962 | relationship_type: [String]
3963 | toTypes: [String]
3964 | field: String!
3965 | startDate: DateTime
3966 | endDate: DateTime
3967 | dateAttribute: String
3968 | operation: StatsOperation!
3969 | limit: Int
3970 | order: String
3971 | types: [String]
3972 | filters: FilterGroup
3973 | search: String
3974 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3975 | stixCoreRelationshipsDistribution(
3976 | field: String!
3977 | operation: StatsOperation!
3978 | startDate: DateTime
3979 | endDate: DateTime
3980 | dateAttribute: String
3981 | isTo: Boolean
3982 | limit: Int
3983 | order: String
3984 | elementWithTargetTypes: [String]
3985 | fromId: [String]
3986 | fromRole: String
3987 | fromTypes: [String]
3988 | toId: [String]
3989 | toRole: String
3990 | toTypes: [String]
3991 | relationship_type: [String]
3992 | confidences: [Int]
3993 | search: String
3994 | filters: FilterGroup
3995 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
3996 | opinions_metrics: OpinionsMetrics
3997 | # StixDomainObject
3998 | revoked: Boolean!
3999 | confidence: Int
4000 | lang: String
4001 | created: DateTime
4002 | modified: DateTime
4003 | x_opencti_graph_data: String
4004 | objectAssignee: [Assignee!]
4005 | avatar: OpenCtiFile
4006 | # Container
4007 | authorized_members: [MemberAccess!]
4008 | currentUserAccessRight: String
4009 | objects(
4010 | first: Int
4011 | after: ID
4012 | orderBy: StixObjectOrStixRelationshipsOrdering
4013 | orderMode: OrderingMode
4014 | filters: FilterGroup
4015 | search: String
4016 | types: [String]
4017 | all: Boolean
4018 | ): StixObjectOrStixRelationshipRefConnection
4019 | relatedContainers(
4020 | first: Int
4021 | after: ID
4022 | orderBy: ContainersOrdering
4023 | orderMode: OrderingMode
4024 | filters: FilterGroup
4025 | search: String
4026 | types: [String]
4027 | viaTypes: [String]
4028 | ): ContainerConnection
4029 | # Report
4030 | name: String!
4031 | description: String
4032 | content: String
4033 | content_mapping: String
4034 | report_types: [String]
4035 | x_opencti_reliability: String
4036 | published: DateTime
4037 | objectParticipant: [Participant!]
4038 | # Technical
4039 | creators: [Creator!]
4040 | toStix: String
4041 | importFiles(
4042 | first: Int
4043 | prefixMimeType: String
4044 | after: ID
4045 | orderBy: FileOrdering
4046 | orderMode: OrderingMode
4047 | search: String
4048 | filters: FilterGroup
4049 | ): FileConnection
4050 | pendingFiles(
4051 | first: Int
4052 | after: ID
4053 | orderBy: FileOrdering
4054 | orderMode: OrderingMode
4055 | search: String
4056 | filters: FilterGroup
4057 | ): FileConnection
4058 | contentsFromTemplate(
4059 | first: Int
4060 | prefixMimeType: String
4061 | after: ID
4062 | orderBy: FileOrdering
4063 | orderMode: OrderingMode
4064 | search: String
4065 | filters: FilterGroup
4066 | ): FileConnection
4067 | templates: [Template!]
4068 | templateAndUtils(
4069 | templateId: String!
4070 | ): TemplateAndUtils
4071 | exportFiles(first: Int): FileConnection
4072 | editContext: [EditUserContext!]
4073 | connectors(onlyAlive: Boolean): [Connector]
4074 | jobs(first: Int): [Work]
4075 | status: Status
4076 | workflowEnabled: Boolean
4077 | deleteWithElementsCount: Int @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
4078 | }
4079 | input ReportAddInput {
4080 | stix_id: StixId
4081 | x_opencti_stix_ids: [StixId]
4082 | name: String! @constraint(minLength: 2, format: "not-blank")
4083 | description: String
4084 | content: String
4085 | content_mapping: String
4086 | published: DateTime!
4087 | report_types: [String]
4088 | x_opencti_reliability: String
4089 | revoked: Boolean
4090 | lang: String
4091 | confidence: Int
4092 | createdBy: String
4093 | objectOrganization: [String]
4094 | objectMarking: [String]
4095 | objectAssignee: [String]
4096 | objectParticipant: [String]
4097 | objectLabel: [String]
4098 | externalReferences: [String]
4099 | objects: [String]
4100 | created: DateTime
4101 | modified: DateTime
4102 | x_opencti_workflow_id: String
4103 | clientMutationId: String
4104 | update: Boolean
4105 | file: Upload
4106 | }
4107 |
4108 | ############## CoursesOfAction
4109 | enum CoursesOfActionOrdering {
4110 | name
4111 | created
4112 | modified
4113 | created_at
4114 | updated_at
4115 | x_opencti_workflow_id
4116 | objectMarking
4117 | x_mitre_id
4118 | _score
4119 | }
4120 | type CourseOfActionConnection {
4121 | pageInfo: PageInfo!
4122 | edges: [CourseOfActionEdge]
4123 | }
4124 | type CourseOfActionEdge {
4125 | cursor: String!
4126 | node: CourseOfAction!
4127 | }
4128 | type CourseOfAction implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
4129 | id: ID! # internal_id
4130 | standard_id: String!
4131 | entity_type: String!
4132 | parent_types: [String]!
4133 | # StixObject
4134 | representative: Representative!
4135 | x_opencti_stix_ids: [StixId]
4136 | is_inferred: Boolean!
4137 | spec_version: String!
4138 | created_at: DateTime!
4139 | updated_at: DateTime!
4140 | draftVersion: DraftVersion
4141 | # inferences
4142 | x_opencti_inferences: [Inference]
4143 | # StixCoreObject
4144 | createdBy: Identity
4145 | numberOfConnectedElement: Int!
4146 | objectMarking: [MarkingDefinition!]
4147 | objectOrganization: [Organization!]
4148 | objectLabel: [Label!]
4149 | externalReferences(first: Int): ExternalReferenceConnection
4150 | containersNumber: Number
4151 | containers(first: Int, entityTypes: [String!]): ContainerConnection
4152 | reports(first: Int): ReportConnection
4153 | notes(first: Int): NoteConnection
4154 | opinions(first: Int): OpinionConnection
4155 | observedData(first: Int): ObservedDataConnection
4156 | groupings(first: Int): GroupingConnection
4157 | cases(first: Int): CaseConnection
4158 | stixCoreRelationships(
4159 | first: Int
4160 | after: ID
4161 | orderBy: StixCoreRelationshipsOrdering
4162 | orderMode: OrderingMode
4163 | fromId: StixRef
4164 | toId: StixRef
4165 | fromTypes: [String]
4166 | toTypes: [String]
4167 | relationship_type: String
4168 | startTimeStart: DateTime
4169 | startTimeStop: DateTime
4170 | stopTimeStart: DateTime
4171 | stopTimeStop: DateTime
4172 | firstSeenStart: DateTime
4173 | firstSeenStop: DateTime
4174 | lastSeenStart: DateTime
4175 | lastSeenStop: DateTime
4176 | confidences: [Int]
4177 | search: String
4178 | filters: FilterGroup
4179 | ): StixCoreRelationshipConnection
4180 | stixCoreObjectsDistribution(
4181 | relationship_type: [String]
4182 | toTypes: [String]
4183 | field: String!
4184 | startDate: DateTime
4185 | endDate: DateTime
4186 | dateAttribute: String
4187 | operation: StatsOperation!
4188 | limit: Int
4189 | order: String
4190 | types: [String]
4191 | filters: FilterGroup
4192 | search: String
4193 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4194 | stixCoreRelationshipsDistribution(
4195 | field: String!
4196 | operation: StatsOperation!
4197 | startDate: DateTime
4198 | endDate: DateTime
4199 | dateAttribute: String
4200 | isTo: Boolean
4201 | limit: Int
4202 | order: String
4203 | elementWithTargetTypes: [String]
4204 | fromId: [String]
4205 | fromRole: String
4206 | fromTypes: [String]
4207 | toId: [String]
4208 | toRole: String
4209 | toTypes: [String]
4210 | relationship_type: [String]
4211 | confidences: [Int]
4212 | search: String
4213 | filters: FilterGroup
4214 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4215 | opinions_metrics: OpinionsMetrics
4216 | # StixDomainObject
4217 | revoked: Boolean!
4218 | confidence: Int
4219 | lang: String
4220 | created: DateTime
4221 | modified: DateTime
4222 | x_opencti_graph_data: String
4223 | objectAssignee: [Assignee!]
4224 | objectParticipant: [Participant!]
4225 | avatar: OpenCtiFile
4226 | # CourseOfAction
4227 | name: String!
4228 | description: String
4229 | x_opencti_aliases: [String]
4230 | x_mitre_id: String
4231 | x_opencti_threat_hunting: String
4232 | x_opencti_log_sources: [String]
4233 | attackPatterns: AttackPatternConnection
4234 | # Technical
4235 | creators: [Creator!]
4236 | toStix: String
4237 | importFiles(
4238 | first: Int
4239 | prefixMimeType: String
4240 | after: ID
4241 | orderBy: FileOrdering
4242 | orderMode: OrderingMode
4243 | search: String
4244 | filters: FilterGroup
4245 | ): FileConnection
4246 | pendingFiles(
4247 | first: Int
4248 | after: ID
4249 | orderBy: FileOrdering
4250 | orderMode: OrderingMode
4251 | search: String
4252 | filters: FilterGroup
4253 | ): FileConnection
4254 | exportFiles(first: Int): FileConnection
4255 | editContext: [EditUserContext!]
4256 | connectors(onlyAlive: Boolean): [Connector]
4257 | jobs(first: Int): [Work]
4258 | status: Status
4259 | workflowEnabled: Boolean
4260 | }
4261 | input CourseOfActionAddInput {
4262 | stix_id: StixId
4263 | x_opencti_stix_ids: [StixId]
4264 | name: String! @constraint(minLength: 2, format: "not-blank")
4265 | description: String
4266 | x_opencti_aliases: [String]
4267 | x_mitre_id: String
4268 | confidence: Int
4269 | revoked: Boolean
4270 | lang: String
4271 | createdBy: String
4272 | objectMarking: [String]
4273 | objectOrganization: [String]
4274 | objectLabel: [String]
4275 | externalReferences: [String]
4276 | created: DateTime
4277 | modified: DateTime
4278 | x_opencti_workflow_id: String
4279 | clientMutationId: String
4280 | update: Boolean
4281 | file: Upload
4282 | }
4283 |
4284 | ############## Identities
4285 | enum IdentitiesOrdering {
4286 | name
4287 | created
4288 | modified
4289 | created_at
4290 | updated_at
4291 | x_opencti_workflow_id
4292 | _score
4293 | }
4294 | type IdentityConnection {
4295 | pageInfo: PageInfo!
4296 | edges: [IdentityEdge]
4297 | }
4298 | type IdentityEdge {
4299 | cursor: String!
4300 | node: Identity!
4301 | }
4302 | enum IdentityType {
4303 | Sector
4304 | Organization
4305 | Individual
4306 | System
4307 | }
4308 | interface Identity {
4309 | id: ID! # internal_id
4310 | standard_id: String!
4311 | entity_type: String!
4312 | parent_types: [String]!
4313 | # StixObject
4314 | representative: Representative!
4315 | x_opencti_stix_ids: [StixId]
4316 | is_inferred: Boolean!
4317 | spec_version: String!
4318 | created_at: DateTime!
4319 | updated_at: DateTime!
4320 | draftVersion: DraftVersion
4321 | # StixCoreObject
4322 | createdBy: Identity
4323 | numberOfConnectedElement: Int!
4324 | objectMarking: [MarkingDefinition!]
4325 | objectOrganization: [Organization!]
4326 | objectLabel: [Label!]
4327 | externalReferences(first: Int): ExternalReferenceConnection
4328 | containersNumber: Number
4329 | containers(first: Int, entityTypes: [String!]): ContainerConnection
4330 | reports(first: Int): ReportConnection
4331 | notes(first: Int): NoteConnection
4332 | opinions(first: Int): OpinionConnection
4333 | observedData(first: Int): ObservedDataConnection
4334 | groupings(first: Int): GroupingConnection
4335 | cases(first: Int): CaseConnection
4336 | stixCoreRelationships(
4337 | first: Int
4338 | after: ID
4339 | orderBy: StixCoreRelationshipsOrdering
4340 | orderMode: OrderingMode
4341 | fromId: StixRef
4342 | toId: StixRef
4343 | fromTypes: [String]
4344 | toTypes: [String]
4345 | relationship_type: String
4346 | startTimeStart: DateTime
4347 | startTimeStop: DateTime
4348 | stopTimeStart: DateTime
4349 | stopTimeStop: DateTime
4350 | firstSeenStart: DateTime
4351 | firstSeenStop: DateTime
4352 | lastSeenStart: DateTime
4353 | lastSeenStop: DateTime
4354 | confidences: [Int]
4355 | search: String
4356 | filters: FilterGroup
4357 | ): StixCoreRelationshipConnection
4358 | stixCoreObjectsDistribution(
4359 | relationship_type: [String]
4360 | toTypes: [String]
4361 | field: String!
4362 | startDate: DateTime
4363 | endDate: DateTime
4364 | dateAttribute: String
4365 | operation: StatsOperation!
4366 | limit: Int
4367 | order: String
4368 | types: [String]
4369 | filters: FilterGroup
4370 | search: String
4371 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4372 | stixCoreRelationshipsDistribution(
4373 | field: String!
4374 | operation: StatsOperation!
4375 | startDate: DateTime
4376 | endDate: DateTime
4377 | dateAttribute: String
4378 | isTo: Boolean
4379 | limit: Int
4380 | order: String
4381 | elementWithTargetTypes: [String]
4382 | fromId: [String]
4383 | fromRole: String
4384 | fromTypes: [String]
4385 | toId: [String]
4386 | toRole: String
4387 | toTypes: [String]
4388 | relationship_type: [String]
4389 | confidences: [Int]
4390 | search: String
4391 | filters: FilterGroup
4392 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4393 | opinions_metrics: OpinionsMetrics
4394 | # StixDomainObject
4395 | revoked: Boolean!
4396 | confidence: Int
4397 | lang: String
4398 | created: DateTime
4399 | modified: DateTime
4400 | x_opencti_graph_data: String
4401 | objectAssignee: [Assignee!]
4402 | avatar: OpenCtiFile
4403 | # Identity
4404 | identity_class: String!
4405 | name: String!
4406 | description: String
4407 | roles: [String]
4408 | contact_information: String
4409 | x_opencti_aliases: [String]
4410 | x_opencti_reliability: String
4411 | # Technical
4412 | creators: [Creator!]
4413 | toStix: String
4414 | importFiles(
4415 | first: Int
4416 | prefixMimeType: String
4417 | after: ID
4418 | orderBy: FileOrdering
4419 | orderMode: OrderingMode
4420 | search: String
4421 | filters: FilterGroup
4422 | ): FileConnection
4423 | pendingFiles(
4424 | first: Int
4425 | after: ID
4426 | orderBy: FileOrdering
4427 | orderMode: OrderingMode
4428 | search: String
4429 | filters: FilterGroup
4430 | ): FileConnection
4431 | exportFiles(first: Int): FileConnection
4432 | editContext: [EditUserContext!]
4433 | connectors(onlyAlive: Boolean): [Connector]
4434 | jobs(first: Int): [Work]
4435 | status: Status
4436 | workflowEnabled: Boolean
4437 | }
4438 | input IdentityAddInput {
4439 | stix_id: StixId
4440 | x_opencti_stix_ids: [StixId]
4441 | type: IdentityType!
4442 | name: String! @constraint(minLength: 2, format: "not-blank")
4443 | description: String
4444 | contact_information: String
4445 | roles: [String]
4446 | x_opencti_aliases: [String]
4447 | confidence: Int
4448 | revoked: Boolean
4449 | lang: String
4450 | createdBy: String
4451 | objectMarking: [String]
4452 | objectLabel: [String]
4453 | externalReferences: [String]
4454 | x_opencti_workflow_id: String
4455 | clientMutationId: String
4456 | created: DateTime
4457 | modified: DateTime
4458 | update: Boolean
4459 | }
4460 |
4461 | ################ Individuals
4462 | enum IndividualsOrdering {
4463 | name
4464 | firstname
4465 | lastname
4466 | created
4467 | modified
4468 | x_opencti_workflow_id
4469 | objectMarking
4470 | _score
4471 | }
4472 | type IndividualConnection {
4473 | pageInfo: PageInfo!
4474 | edges: [IndividualEdge]
4475 | }
4476 | type IndividualEdge {
4477 | cursor: String!
4478 | node: Individual!
4479 | }
4480 | type Individual implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Identity {
4481 | id: ID! # internal_id
4482 | standard_id: String!
4483 | entity_type: String!
4484 | parent_types: [String]!
4485 | # StixObject
4486 | representative: Representative!
4487 | x_opencti_stix_ids: [StixId]
4488 | is_inferred: Boolean!
4489 | spec_version: String!
4490 | created_at: DateTime!
4491 | updated_at: DateTime!
4492 | draftVersion: DraftVersion
4493 | # inferences
4494 | x_opencti_inferences: [Inference]
4495 | # StixCoreObject
4496 | createdBy: Identity
4497 | numberOfConnectedElement: Int!
4498 | objectMarking: [MarkingDefinition!]
4499 | objectOrganization: [Organization!]
4500 | objectLabel: [Label!]
4501 | externalReferences(first: Int): ExternalReferenceConnection
4502 | containersNumber: Number
4503 | containers(first: Int, entityTypes: [String!]): ContainerConnection
4504 | reports(first: Int): ReportConnection
4505 | notes(first: Int): NoteConnection
4506 | opinions(first: Int): OpinionConnection
4507 | observedData(first: Int): ObservedDataConnection
4508 | groupings(first: Int): GroupingConnection
4509 | cases(first: Int): CaseConnection
4510 | stixCoreRelationships(
4511 | first: Int
4512 | after: ID
4513 | orderBy: StixCoreRelationshipsOrdering
4514 | orderMode: OrderingMode
4515 | fromId: StixRef
4516 | toId: StixRef
4517 | fromTypes: [String]
4518 | toTypes: [String]
4519 | relationship_type: String
4520 | startTimeStart: DateTime
4521 | startTimeStop: DateTime
4522 | stopTimeStart: DateTime
4523 | stopTimeStop: DateTime
4524 | firstSeenStart: DateTime
4525 | firstSeenStop: DateTime
4526 | lastSeenStart: DateTime
4527 | lastSeenStop: DateTime
4528 | confidences: [Int]
4529 | search: String
4530 | filters: FilterGroup
4531 | ): StixCoreRelationshipConnection
4532 | stixCoreObjectsDistribution(
4533 | relationship_type: [String]
4534 | toTypes: [String]
4535 | field: String!
4536 | startDate: DateTime
4537 | endDate: DateTime
4538 | dateAttribute: String
4539 | operation: StatsOperation!
4540 | limit: Int
4541 | order: String
4542 | types: [String]
4543 | filters: FilterGroup
4544 | search: String
4545 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4546 | stixCoreRelationshipsDistribution(
4547 | field: String!
4548 | operation: StatsOperation!
4549 | startDate: DateTime
4550 | endDate: DateTime
4551 | dateAttribute: String
4552 | isTo: Boolean
4553 | limit: Int
4554 | order: String
4555 | elementWithTargetTypes: [String]
4556 | fromId: [String]
4557 | fromRole: String
4558 | fromTypes: [String]
4559 | toId: [String]
4560 | toRole: String
4561 | toTypes: [String]
4562 | relationship_type: [String]
4563 | confidences: [Int]
4564 | search: String
4565 | filters: FilterGroup
4566 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4567 | opinions_metrics: OpinionsMetrics
4568 | # StixDomainObject
4569 | revoked: Boolean!
4570 | confidence: Int
4571 | lang: String
4572 | created: DateTime
4573 | modified: DateTime
4574 | x_opencti_graph_data: String
4575 | objectAssignee: [Assignee!]
4576 | objectParticipant: [Participant!]
4577 | avatar: OpenCtiFile
4578 | # Identity
4579 | identity_class: String!
4580 | name: String!
4581 | description: String
4582 | contact_information: String
4583 | roles: [String]
4584 | x_opencti_aliases: [String]
4585 | x_opencti_reliability: String
4586 | # Individual
4587 | x_opencti_firstname: String
4588 | x_opencti_lastname: String
4589 | organizations: OrganizationConnection
4590 | # Technical
4591 | creators: [Creator!]
4592 | toStix: String
4593 | importFiles(
4594 | first: Int
4595 | prefixMimeType: String
4596 | after: ID
4597 | orderBy: FileOrdering
4598 | orderMode: OrderingMode
4599 | search: String
4600 | filters: FilterGroup
4601 | ): FileConnection
4602 | pendingFiles(
4603 | first: Int
4604 | after: ID
4605 | orderBy: FileOrdering
4606 | orderMode: OrderingMode
4607 | search: String
4608 | filters: FilterGroup
4609 | ): FileConnection
4610 | exportFiles(first: Int): FileConnection
4611 | editContext: [EditUserContext!]
4612 | connectors(onlyAlive: Boolean): [Connector]
4613 | jobs(first: Int): [Work]
4614 | status: Status
4615 | workflowEnabled: Boolean
4616 | isUser: Boolean @auth(for: [KNOWLEDGE, EXPLORE])
4617 | }
4618 | input IndividualAddInput {
4619 | stix_id: StixId
4620 | x_opencti_stix_ids: [StixId]
4621 | name: String! @constraint(minLength: 2, format: "not-blank")
4622 | description: String
4623 | contact_information: String
4624 | roles: [String]
4625 | x_opencti_aliases: [String]
4626 | x_opencti_firstname: String
4627 | x_opencti_lastname: String
4628 | x_opencti_reliability: String
4629 | confidence: Int
4630 | revoked: Boolean
4631 | lang: String
4632 | createdBy: String
4633 | objectOrganization: [String]
4634 | objectMarking: [String]
4635 | objectLabel: [String]
4636 | externalReferences: [String]
4637 | created: DateTime
4638 | modified: DateTime
4639 | x_opencti_workflow_id: String
4640 | clientMutationId: String
4641 | update: Boolean
4642 | file: Upload
4643 | }
4644 |
4645 | ################ Sectors
4646 | enum SectorsOrdering {
4647 | name
4648 | created
4649 | modified
4650 | created_at
4651 | updated_at
4652 | x_opencti_workflow_id
4653 | objectMarking
4654 | _score
4655 | }
4656 | type SectorConnection {
4657 | pageInfo: PageInfo!
4658 | edges: [SectorEdge]
4659 | }
4660 | type SectorEdge {
4661 | cursor: String!
4662 | types: [String]
4663 | node: Sector!
4664 | }
4665 | type Sector implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Identity {
4666 | id: ID! # internal_id
4667 | standard_id: String!
4668 | entity_type: String!
4669 | parent_types: [String]!
4670 | # StixObject
4671 | representative: Representative!
4672 | x_opencti_stix_ids: [StixId]
4673 | is_inferred: Boolean!
4674 | spec_version: String!
4675 | created_at: DateTime!
4676 | updated_at: DateTime!
4677 | draftVersion: DraftVersion
4678 | # inferences
4679 | x_opencti_inferences: [Inference]
4680 | # StixCoreObject
4681 | createdBy: Identity
4682 | numberOfConnectedElement: Int!
4683 | objectMarking: [MarkingDefinition!]
4684 | objectOrganization: [Organization!]
4685 | objectLabel: [Label!]
4686 | externalReferences(first: Int): ExternalReferenceConnection
4687 | containersNumber: Number
4688 | containers(first: Int, entityTypes: [String!]): ContainerConnection
4689 | reports(first: Int): ReportConnection
4690 | notes(first: Int): NoteConnection
4691 | opinions(first: Int): OpinionConnection
4692 | observedData(first: Int): ObservedDataConnection
4693 | groupings(first: Int): GroupingConnection
4694 | cases(first: Int): CaseConnection
4695 | stixCoreRelationships(
4696 | first: Int
4697 | after: ID
4698 | orderBy: StixCoreRelationshipsOrdering
4699 | orderMode: OrderingMode
4700 | fromId: StixRef
4701 | toId: StixRef
4702 | fromTypes: [String]
4703 | toTypes: [String]
4704 | relationship_type: String
4705 | startTimeStart: DateTime
4706 | startTimeStop: DateTime
4707 | stopTimeStart: DateTime
4708 | stopTimeStop: DateTime
4709 | firstSeenStart: DateTime
4710 | firstSeenStop: DateTime
4711 | lastSeenStart: DateTime
4712 | lastSeenStop: DateTime
4713 | confidences: [Int]
4714 | search: String
4715 | filters: FilterGroup
4716 | ): StixCoreRelationshipConnection
4717 | stixCoreObjectsDistribution(
4718 | relationship_type: [String]
4719 | toTypes: [String]
4720 | field: String!
4721 | startDate: DateTime
4722 | endDate: DateTime
4723 | dateAttribute: String
4724 | operation: StatsOperation!
4725 | limit: Int
4726 | order: String
4727 | types: [String]
4728 | filters: FilterGroup
4729 | search: String
4730 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4731 | stixCoreRelationshipsDistribution(
4732 | field: String!
4733 | operation: StatsOperation!
4734 | startDate: DateTime
4735 | endDate: DateTime
4736 | dateAttribute: String
4737 | isTo: Boolean
4738 | limit: Int
4739 | order: String
4740 | elementWithTargetTypes: [String]
4741 | fromId: [String]
4742 | fromRole: String
4743 | fromTypes: [String]
4744 | toId: [String]
4745 | toRole: String
4746 | toTypes: [String]
4747 | relationship_type: [String]
4748 | confidences: [Int]
4749 | search: String
4750 | filters: FilterGroup
4751 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4752 | opinions_metrics: OpinionsMetrics
4753 | # StixDomainObject
4754 | revoked: Boolean!
4755 | confidence: Int
4756 | lang: String
4757 | created: DateTime
4758 | modified: DateTime
4759 | x_opencti_graph_data: String
4760 | objectAssignee: [Assignee!]
4761 | objectParticipant: [Participant!]
4762 | avatar: OpenCtiFile
4763 | # Identity
4764 | identity_class: String!
4765 | name: String!
4766 | description: String
4767 | contact_information: String
4768 | roles: [String]
4769 | x_opencti_aliases: [String]
4770 | x_opencti_reliability: String
4771 | # Sector
4772 | parentSectors: SectorConnection
4773 | subSectors: SectorConnection
4774 | isSubSector: Boolean
4775 | targetedOrganizations: StixCoreRelationshipConnection
4776 | # Technical
4777 | creators: [Creator!]
4778 | toStix: String
4779 | importFiles(
4780 | first: Int
4781 | prefixMimeType: String
4782 | after: ID
4783 | orderBy: FileOrdering
4784 | orderMode: OrderingMode
4785 | search: String
4786 | filters: FilterGroup
4787 | ): FileConnection
4788 | pendingFiles(
4789 | first: Int
4790 | after: ID
4791 | orderBy: FileOrdering
4792 | orderMode: OrderingMode
4793 | search: String
4794 | filters: FilterGroup
4795 | ): FileConnection
4796 | exportFiles(first: Int): FileConnection
4797 | editContext: [EditUserContext!]
4798 | connectors(onlyAlive: Boolean): [Connector]
4799 | jobs(first: Int): [Work]
4800 | status: Status
4801 | workflowEnabled: Boolean
4802 | }
4803 | input SectorAddInput {
4804 | stix_id: StixId
4805 | x_opencti_stix_ids: [StixId]
4806 | name: String! @constraint(minLength: 2, format: "not-blank")
4807 | description: String
4808 | contact_information: String
4809 | roles: [String]
4810 | x_opencti_aliases: [String]
4811 | confidence: Int
4812 | revoked: Boolean
4813 | lang: String
4814 | createdBy: String
4815 | objectMarking: [String]
4816 | objectLabel: [String]
4817 | externalReferences: [String]
4818 | created: DateTime
4819 | modified: DateTime
4820 | x_opencti_workflow_id: String
4821 | clientMutationId: String
4822 | update: Boolean
4823 | file: Upload
4824 | }
4825 |
4826 | ################ Systems
4827 | enum SystemsOrdering {
4828 | name
4829 | confidence
4830 | firstname
4831 | lastname
4832 | created
4833 | modified
4834 | x_opencti_workflow_id
4835 | _score
4836 | }
4837 | type SystemConnection {
4838 | pageInfo: PageInfo!
4839 | edges: [SystemEdge]
4840 | }
4841 | type SystemEdge {
4842 | cursor: String!
4843 | node: System!
4844 | }
4845 | type System implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Identity {
4846 | id: ID! # internal_id
4847 | standard_id: String!
4848 | entity_type: String!
4849 | parent_types: [String]!
4850 | # StixObject
4851 | representative: Representative!
4852 | x_opencti_stix_ids: [StixId]
4853 | is_inferred: Boolean!
4854 | spec_version: String!
4855 | created_at: DateTime!
4856 | updated_at: DateTime!
4857 | draftVersion: DraftVersion
4858 | # inferences
4859 | x_opencti_inferences: [Inference]
4860 | # StixCoreObject
4861 | createdBy: Identity
4862 | numberOfConnectedElement: Int!
4863 | objectMarking: [MarkingDefinition!]
4864 | objectOrganization: [Organization!]
4865 | objectLabel: [Label!]
4866 | externalReferences(first: Int): ExternalReferenceConnection
4867 | containersNumber: Number
4868 | containers(first: Int, entityTypes: [String!]): ContainerConnection
4869 | reports(first: Int): ReportConnection
4870 | notes(first: Int): NoteConnection
4871 | opinions(first: Int): OpinionConnection
4872 | observedData(first: Int): ObservedDataConnection
4873 | groupings(first: Int): GroupingConnection
4874 | cases(first: Int): CaseConnection
4875 | stixCoreRelationships(
4876 | first: Int
4877 | after: ID
4878 | orderBy: StixCoreRelationshipsOrdering
4879 | orderMode: OrderingMode
4880 | fromId: StixRef
4881 | toId: StixRef
4882 | fromTypes: [String]
4883 | toTypes: [String]
4884 | relationship_type: String
4885 | startTimeStart: DateTime
4886 | startTimeStop: DateTime
4887 | stopTimeStart: DateTime
4888 | stopTimeStop: DateTime
4889 | firstSeenStart: DateTime
4890 | firstSeenStop: DateTime
4891 | lastSeenStart: DateTime
4892 | lastSeenStop: DateTime
4893 | confidences: [Int]
4894 | search: String
4895 | filters: FilterGroup
4896 | ): StixCoreRelationshipConnection
4897 | stixCoreObjectsDistribution(
4898 | relationship_type: [String]
4899 | toTypes: [String]
4900 | field: String!
4901 | startDate: DateTime
4902 | endDate: DateTime
4903 | dateAttribute: String
4904 | operation: StatsOperation!
4905 | limit: Int
4906 | order: String
4907 | types: [String]
4908 | filters: FilterGroup
4909 | search: String
4910 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4911 | stixCoreRelationshipsDistribution(
4912 | field: String!
4913 | operation: StatsOperation!
4914 | startDate: DateTime
4915 | endDate: DateTime
4916 | dateAttribute: String
4917 | isTo: Boolean
4918 | limit: Int
4919 | order: String
4920 | elementWithTargetTypes: [String]
4921 | fromId: [String]
4922 | fromRole: String
4923 | fromTypes: [String]
4924 | toId: [String]
4925 | toRole: String
4926 | toTypes: [String]
4927 | relationship_type: [String]
4928 | confidences: [Int]
4929 | search: String
4930 | filters: FilterGroup
4931 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
4932 | opinions_metrics: OpinionsMetrics
4933 | # StixDomainObject
4934 | revoked: Boolean!
4935 | confidence: Int
4936 | lang: String
4937 | created: DateTime
4938 | modified: DateTime
4939 | x_opencti_graph_data: String
4940 | objectAssignee: [Assignee!]
4941 | objectParticipant: [Participant!]
4942 | avatar: OpenCtiFile
4943 | # Identity
4944 | identity_class: String!
4945 | name: String!
4946 | description: String
4947 | contact_information: String
4948 | roles: [String]
4949 | x_opencti_aliases: [String]
4950 | x_opencti_reliability: String
4951 | # System
4952 | x_opencti_firstname: String
4953 | x_opencti_lastname: String
4954 | organizations: OrganizationConnection
4955 | # Technical
4956 | creators: [Creator!]
4957 | toStix: String
4958 | importFiles(
4959 | first: Int
4960 | prefixMimeType: String
4961 | after: ID
4962 | orderBy: FileOrdering
4963 | orderMode: OrderingMode
4964 | search: String
4965 | filters: FilterGroup
4966 | ): FileConnection
4967 | pendingFiles(
4968 | first: Int
4969 | after: ID
4970 | orderBy: FileOrdering
4971 | orderMode: OrderingMode
4972 | search: String
4973 | filters: FilterGroup
4974 | ): FileConnection
4975 | exportFiles(first: Int): FileConnection
4976 | editContext: [EditUserContext!]
4977 | connectors(onlyAlive: Boolean): [Connector]
4978 | jobs(first: Int): [Work]
4979 | status: Status
4980 | workflowEnabled: Boolean
4981 | }
4982 | input SystemAddInput {
4983 | stix_id: StixId
4984 | x_opencti_stix_ids: [StixId]
4985 | name: String! @constraint(minLength: 2, format: "not-blank")
4986 | description: String
4987 | contact_information: String
4988 | roles: [String]
4989 | x_opencti_aliases: [String]
4990 | x_opencti_firstname: String
4991 | x_opencti_lastname: String
4992 | x_opencti_reliability: String
4993 | confidence: Int
4994 | revoked: Boolean
4995 | lang: String
4996 | createdBy: String
4997 | objectOrganization: [String]
4998 | objectMarking: [String]
4999 | objectLabel: [String]
5000 | externalReferences: [String]
5001 | created: DateTime
5002 | modified: DateTime
5003 | x_opencti_workflow_id: String
5004 | clientMutationId: String
5005 | update: Boolean
5006 | file: Upload
5007 | }
5008 |
5009 | ############## Infrastructures
5010 | enum InfrastructuresOrdering {
5011 | name
5012 | infrastructure_types
5013 | first_seen
5014 | last_seen
5015 | created
5016 | modified
5017 | created_at
5018 | updated_at
5019 | x_opencti_workflow_id
5020 | confidence
5021 | createdBy
5022 | objectMarking
5023 | creator
5024 | _score
5025 | }
5026 | type InfrastructureConnection {
5027 | pageInfo: PageInfo!
5028 | edges: [InfrastructureEdge]
5029 | }
5030 | type InfrastructureEdge {
5031 | cursor: String!
5032 | node: Infrastructure!
5033 | }
5034 | type Infrastructure implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
5035 | id: ID! # internal_id
5036 | standard_id: String!
5037 | entity_type: String!
5038 | parent_types: [String]!
5039 | # StixObject
5040 | representative: Representative!
5041 | x_opencti_stix_ids: [StixId]
5042 | is_inferred: Boolean!
5043 | spec_version: String!
5044 | created_at: DateTime!
5045 | updated_at: DateTime!
5046 | draftVersion: DraftVersion
5047 | # inferences
5048 | x_opencti_inferences: [Inference]
5049 | # StixCoreObject
5050 | createdBy: Identity
5051 | numberOfConnectedElement: Int!
5052 | objectMarking: [MarkingDefinition!]
5053 | objectOrganization: [Organization!]
5054 | objectLabel: [Label!]
5055 | externalReferences(first: Int): ExternalReferenceConnection
5056 | containersNumber: Number
5057 | containers(first: Int, entityTypes: [String!]): ContainerConnection
5058 | reports(first: Int): ReportConnection
5059 | notes(first: Int): NoteConnection
5060 | opinions(first: Int): OpinionConnection
5061 | observedData(first: Int): ObservedDataConnection
5062 | groupings(first: Int): GroupingConnection
5063 | cases(first: Int): CaseConnection
5064 | stixCoreRelationships(
5065 | first: Int
5066 | after: ID
5067 | orderBy: StixCoreRelationshipsOrdering
5068 | orderMode: OrderingMode
5069 | fromId: StixRef
5070 | toId: StixRef
5071 | fromTypes: [String]
5072 | toTypes: [String]
5073 | relationship_type: String
5074 | startTimeStart: DateTime
5075 | startTimeStop: DateTime
5076 | stopTimeStart: DateTime
5077 | stopTimeStop: DateTime
5078 | firstSeenStart: DateTime
5079 | firstSeenStop: DateTime
5080 | lastSeenStart: DateTime
5081 | lastSeenStop: DateTime
5082 | confidences: [Int]
5083 | search: String
5084 | filters: FilterGroup
5085 | ): StixCoreRelationshipConnection
5086 | stixCoreObjectsDistribution(
5087 | relationship_type: [String]
5088 | toTypes: [String]
5089 | field: String!
5090 | startDate: DateTime
5091 | endDate: DateTime
5092 | dateAttribute: String
5093 | operation: StatsOperation!
5094 | limit: Int
5095 | order: String
5096 | types: [String]
5097 | filters: FilterGroup
5098 | search: String
5099 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5100 | stixCoreRelationshipsDistribution(
5101 | field: String!
5102 | operation: StatsOperation!
5103 | startDate: DateTime
5104 | endDate: DateTime
5105 | dateAttribute: String
5106 | isTo: Boolean
5107 | limit: Int
5108 | order: String
5109 | elementWithTargetTypes: [String]
5110 | fromId: [String]
5111 | fromRole: String
5112 | fromTypes: [String]
5113 | toId: [String]
5114 | toRole: String
5115 | toTypes: [String]
5116 | relationship_type: [String]
5117 | confidences: [Int]
5118 | search: String
5119 | filters: FilterGroup
5120 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5121 | opinions_metrics: OpinionsMetrics
5122 | # StixDomainObject
5123 | revoked: Boolean!
5124 | confidence: Int
5125 | lang: String
5126 | created: DateTime
5127 | modified: DateTime
5128 | x_opencti_graph_data: String
5129 | objectAssignee: [Assignee!]
5130 | objectParticipant: [Participant!]
5131 | avatar: OpenCtiFile
5132 | # Infrastructure
5133 | name: String!
5134 | aliases: [String]
5135 | description: String
5136 | infrastructure_types: [String]
5137 | first_seen: DateTime
5138 | last_seen: DateTime
5139 | killChainPhases: [KillChainPhase!]
5140 | # Technical
5141 | creators: [Creator!]
5142 | toStix: String
5143 | importFiles(
5144 | first: Int
5145 | prefixMimeType: String
5146 | after: ID
5147 | orderBy: FileOrdering
5148 | orderMode: OrderingMode
5149 | search: String
5150 | filters: FilterGroup
5151 | ): FileConnection
5152 | pendingFiles(
5153 | first: Int
5154 | after: ID
5155 | orderBy: FileOrdering
5156 | orderMode: OrderingMode
5157 | search: String
5158 | filters: FilterGroup
5159 | ): FileConnection
5160 | exportFiles(first: Int): FileConnection
5161 | editContext: [EditUserContext!]
5162 | connectors(onlyAlive: Boolean): [Connector]
5163 | jobs(first: Int): [Work]
5164 | status: Status
5165 | workflowEnabled: Boolean
5166 | }
5167 | input InfrastructureAddInput {
5168 | stix_id: StixId
5169 | x_opencti_stix_ids: [StixId]
5170 | name: String! @constraint(minLength: 2, format: "not-blank")
5171 | description: String
5172 | aliases: [String]
5173 | infrastructure_types: [String]
5174 | first_seen: DateTime
5175 | last_seen: DateTime
5176 | confidence: Int
5177 | revoked: Boolean
5178 | lang: String
5179 | createdBy: String
5180 | objectOrganization: [String]
5181 | objectMarking: [String]
5182 | objectLabel: [String]
5183 | externalReferences: [String]
5184 | killChainPhases: [String]
5185 | created: DateTime
5186 | modified: DateTime
5187 | x_opencti_workflow_id: String
5188 | clientMutationId: String
5189 | update: Boolean
5190 | file: Upload
5191 | }
5192 |
5193 | ############## IntrusionSets
5194 | enum IntrusionSetsOrdering {
5195 | name
5196 | created
5197 | modified
5198 | created_at
5199 | updated_at
5200 | x_opencti_workflow_id
5201 | resource_level
5202 | primary_motivation
5203 | confidence
5204 | _score
5205 | objectMarking
5206 | }
5207 | type IntrusionSetConnection {
5208 | pageInfo: PageInfo!
5209 | edges: [IntrusionSetEdge]
5210 | }
5211 | type IntrusionSetEdge {
5212 | cursor: String!
5213 | node: IntrusionSet!
5214 | }
5215 | type IntrusionSet implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
5216 | id: ID! # internal_id
5217 | standard_id: String!
5218 | entity_type: String!
5219 | parent_types: [String]!
5220 | # StixObject
5221 | representative: Representative!
5222 | x_opencti_stix_ids: [StixId]
5223 | is_inferred: Boolean!
5224 | spec_version: String!
5225 | created_at: DateTime!
5226 | updated_at: DateTime!
5227 | draftVersion: DraftVersion
5228 | # inferences
5229 | x_opencti_inferences: [Inference]
5230 | # StixCoreObject
5231 | createdBy: Identity
5232 | numberOfConnectedElement: Int!
5233 | objectMarking: [MarkingDefinition!]
5234 | objectOrganization: [Organization!]
5235 | objectLabel: [Label!]
5236 | externalReferences(first: Int): ExternalReferenceConnection
5237 | containersNumber: Number
5238 | containers(first: Int, entityTypes: [String!]): ContainerConnection
5239 | reports(first: Int): ReportConnection
5240 | notes(first: Int): NoteConnection
5241 | opinions(first: Int): OpinionConnection
5242 | observedData(first: Int): ObservedDataConnection
5243 | groupings(first: Int): GroupingConnection
5244 | cases(first: Int): CaseConnection
5245 | stixCoreRelationships(
5246 | first: Int
5247 | after: ID
5248 | orderBy: StixCoreRelationshipsOrdering
5249 | orderMode: OrderingMode
5250 | fromId: StixRef
5251 | toId: StixRef
5252 | fromTypes: [String]
5253 | toTypes: [String]
5254 | relationship_type: String
5255 | startTimeStart: DateTime
5256 | startTimeStop: DateTime
5257 | stopTimeStart: DateTime
5258 | stopTimeStop: DateTime
5259 | firstSeenStart: DateTime
5260 | firstSeenStop: DateTime
5261 | lastSeenStart: DateTime
5262 | lastSeenStop: DateTime
5263 | confidences: [Int]
5264 | search: String
5265 | filters: FilterGroup
5266 | ): StixCoreRelationshipConnection
5267 | stixCoreObjectsDistribution(
5268 | relationship_type: [String]
5269 | toTypes: [String]
5270 | field: String!
5271 | startDate: DateTime
5272 | endDate: DateTime
5273 | dateAttribute: String
5274 | operation: StatsOperation!
5275 | limit: Int
5276 | order: String
5277 | types: [String]
5278 | filters: FilterGroup
5279 | search: String
5280 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5281 | stixCoreRelationshipsDistribution(
5282 | field: String!
5283 | operation: StatsOperation!
5284 | startDate: DateTime
5285 | endDate: DateTime
5286 | dateAttribute: String
5287 | isTo: Boolean
5288 | limit: Int
5289 | order: String
5290 | elementWithTargetTypes: [String]
5291 | fromId: [String]
5292 | fromRole: String
5293 | fromTypes: [String]
5294 | toId: [String]
5295 | toRole: String
5296 | toTypes: [String]
5297 | relationship_type: [String]
5298 | confidences: [Int]
5299 | search: String
5300 | filters: FilterGroup
5301 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5302 | opinions_metrics: OpinionsMetrics
5303 | # StixDomainObject
5304 | revoked: Boolean!
5305 | confidence: Int
5306 | lang: String
5307 | created: DateTime
5308 | modified: DateTime
5309 | x_opencti_graph_data: String
5310 | objectAssignee: [Assignee!]
5311 | objectParticipant: [Participant!]
5312 | avatar: OpenCtiFile
5313 | # IntrusionSet
5314 | name: String!
5315 | description: String
5316 | aliases: [String]
5317 | first_seen: DateTime
5318 | last_seen: DateTime
5319 | goals: [String]
5320 | resource_level: String
5321 | primary_motivation: String
5322 | secondary_motivations: [String]
5323 | locations: LocationConnection
5324 | # Technical
5325 | creators: [Creator!]
5326 | toStix: String
5327 | importFiles(
5328 | first: Int
5329 | prefixMimeType: String
5330 | after: ID
5331 | orderBy: FileOrdering
5332 | orderMode: OrderingMode
5333 | search: String
5334 | filters: FilterGroup
5335 | ): FileConnection
5336 | pendingFiles(
5337 | first: Int
5338 | after: ID
5339 | orderBy: FileOrdering
5340 | orderMode: OrderingMode
5341 | search: String
5342 | filters: FilterGroup
5343 | ): FileConnection
5344 | exportFiles(first: Int): FileConnection
5345 | editContext: [EditUserContext!]
5346 | connectors(onlyAlive: Boolean): [Connector]
5347 | jobs(first: Int): [Work]
5348 | status: Status
5349 | workflowEnabled: Boolean
5350 | }
5351 | input IntrusionSetAddInput {
5352 | stix_id: StixId
5353 | x_opencti_stix_ids: [StixId]
5354 | name: String! @constraint(minLength: 2, format: "not-blank")
5355 | description: String
5356 | aliases: [String]
5357 | first_seen: DateTime
5358 | last_seen: DateTime
5359 | goals: [String]
5360 | resource_level: String
5361 | primary_motivation: String
5362 | secondary_motivations: [String]
5363 | confidence: Int
5364 | revoked: Boolean
5365 | lang: String
5366 | createdBy: String
5367 | objectMarking: [String]
5368 | objectAssignee: [String]
5369 | objectOrganization: [String]
5370 | objectLabel: [String]
5371 | externalReferences: [String]
5372 | x_opencti_workflow_id: String
5373 | created: DateTime
5374 | modified: DateTime
5375 | clientMutationId: String
5376 | update: Boolean
5377 | file: Upload
5378 | }
5379 |
5380 | ############## Locations
5381 | enum LocationsOrdering {
5382 | name
5383 | latitude
5384 | longitude
5385 | created
5386 | modified
5387 | created_at
5388 | updated_at
5389 | x_opencti_workflow_id
5390 | _score
5391 | }
5392 | type LocationConnection {
5393 | pageInfo: PageInfo!
5394 | edges: [LocationEdge]
5395 | }
5396 | type LocationEdge {
5397 | cursor: String!
5398 | types: [String]
5399 | node: Location!
5400 | }
5401 | interface Location {
5402 | id: ID! # internal_id
5403 | standard_id: String!
5404 | entity_type: String!
5405 | parent_types: [String]!
5406 | # StixObject
5407 | representative: Representative!
5408 | x_opencti_stix_ids: [StixId]
5409 | is_inferred: Boolean!
5410 | spec_version: String!
5411 | created_at: DateTime!
5412 | updated_at: DateTime!
5413 | draftVersion: DraftVersion
5414 | # StixCoreObject
5415 | createdBy: Identity
5416 | numberOfConnectedElement: Int!
5417 | objectMarking: [MarkingDefinition!]
5418 | objectOrganization: [Organization!]
5419 | objectLabel: [Label!]
5420 | externalReferences(first: Int): ExternalReferenceConnection
5421 | containersNumber: Number
5422 | containers(first: Int, entityTypes: [String!]): ContainerConnection
5423 | reports(first: Int): ReportConnection
5424 | notes(first: Int): NoteConnection
5425 | opinions(first: Int): OpinionConnection
5426 | observedData(first: Int): ObservedDataConnection
5427 | groupings(first: Int): GroupingConnection
5428 | cases(first: Int): CaseConnection
5429 | stixCoreRelationships(
5430 | first: Int
5431 | after: ID
5432 | orderBy: StixCoreRelationshipsOrdering
5433 | orderMode: OrderingMode
5434 | fromId: StixRef
5435 | toId: StixRef
5436 | fromTypes: [String]
5437 | toTypes: [String]
5438 | relationship_type: String
5439 | startTimeStart: DateTime
5440 | startTimeStop: DateTime
5441 | stopTimeStart: DateTime
5442 | stopTimeStop: DateTime
5443 | firstSeenStart: DateTime
5444 | firstSeenStop: DateTime
5445 | lastSeenStart: DateTime
5446 | lastSeenStop: DateTime
5447 | confidences: [Int]
5448 | search: String
5449 | filters: FilterGroup
5450 | ): StixCoreRelationshipConnection
5451 | stixCoreObjectsDistribution(
5452 | relationship_type: [String]
5453 | toTypes: [String]
5454 | field: String!
5455 | startDate: DateTime
5456 | endDate: DateTime
5457 | dateAttribute: String
5458 | operation: StatsOperation!
5459 | limit: Int
5460 | order: String
5461 | types: [String]
5462 | filters: FilterGroup
5463 | search: String
5464 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5465 | stixCoreRelationshipsDistribution(
5466 | field: String!
5467 | operation: StatsOperation!
5468 | startDate: DateTime
5469 | endDate: DateTime
5470 | dateAttribute: String
5471 | isTo: Boolean
5472 | limit: Int
5473 | order: String
5474 | elementWithTargetTypes: [String]
5475 | fromId: [String]
5476 | fromRole: String
5477 | fromTypes: [String]
5478 | toId: [String]
5479 | toRole: String
5480 | toTypes: [String]
5481 | relationship_type: [String]
5482 | confidences: [Int]
5483 | search: String
5484 | filters: FilterGroup
5485 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5486 | opinions_metrics: OpinionsMetrics
5487 | # StixDomainObject
5488 | revoked: Boolean!
5489 | confidence: Int
5490 | lang: String
5491 | created: DateTime
5492 | modified: DateTime
5493 | x_opencti_graph_data: String
5494 | objectAssignee: [Assignee!]
5495 | avatar: OpenCtiFile
5496 | # Location
5497 | name: String!
5498 | description: String
5499 | latitude: Float
5500 | longitude: Float
5501 | precision: Float
5502 | x_opencti_aliases: [String]
5503 | # Technical
5504 | creators: [Creator!]
5505 | toStix: String
5506 | importFiles(
5507 | first: Int
5508 | prefixMimeType: String
5509 | after: ID
5510 | orderBy: FileOrdering
5511 | orderMode: OrderingMode
5512 | search: String
5513 | filters: FilterGroup
5514 | ): FileConnection
5515 | pendingFiles(
5516 | first: Int
5517 | after: ID
5518 | orderBy: FileOrdering
5519 | orderMode: OrderingMode
5520 | search: String
5521 | filters: FilterGroup
5522 | ): FileConnection
5523 | exportFiles(first: Int): FileConnection
5524 | editContext: [EditUserContext!]
5525 | connectors(onlyAlive: Boolean): [Connector]
5526 | jobs(first: Int): [Work]
5527 | status: Status
5528 | workflowEnabled: Boolean
5529 | }
5530 | input LocationAddInput {
5531 | stix_id: StixId
5532 | x_opencti_stix_ids: [StixId]
5533 | type: String!
5534 | name: String! @constraint(minLength: 2, format: "not-blank")
5535 | description: String
5536 | latitude: Float
5537 | longitude: Float
5538 | precision: Float
5539 | x_opencti_aliases: [String]
5540 | confidence: Int
5541 | revoked: Boolean
5542 | lang: String
5543 | createdBy: String
5544 | objectMarking: [String]
5545 | objectLabel: [String]
5546 | externalReferences: [String]
5547 | clientMutationId: String
5548 | created: DateTime
5549 | modified: DateTime
5550 | x_opencti_workflow_id: String
5551 | update: Boolean
5552 | }
5553 |
5554 | ################ Positions
5555 | enum PositionsOrdering {
5556 | name
5557 | postal_address
5558 | postal_code
5559 | created
5560 | modified
5561 | created_at
5562 | updated_at
5563 | x_opencti_workflow_id
5564 | _score
5565 | }
5566 | type PositionConnection {
5567 | pageInfo: PageInfo!
5568 | edges: [PositionEdge]
5569 | }
5570 | type PositionEdge {
5571 | cursor: String!
5572 | node: Position!
5573 | }
5574 | type Position implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Location {
5575 | id: ID! # internal_id
5576 | standard_id: String!
5577 | entity_type: String!
5578 | parent_types: [String]!
5579 | # StixObject
5580 | representative: Representative!
5581 | x_opencti_stix_ids: [StixId]
5582 | is_inferred: Boolean!
5583 | spec_version: String!
5584 | created_at: DateTime!
5585 | updated_at: DateTime!
5586 | draftVersion: DraftVersion
5587 | # inferences
5588 | x_opencti_inferences: [Inference]
5589 | # StixCoreObject
5590 | createdBy: Identity
5591 | numberOfConnectedElement: Int!
5592 | objectMarking: [MarkingDefinition!]
5593 | objectOrganization: [Organization!]
5594 | objectLabel: [Label!]
5595 | externalReferences(first: Int): ExternalReferenceConnection
5596 | containersNumber: Number
5597 | containers(first: Int, entityTypes: [String!]): ContainerConnection
5598 | reports(first: Int): ReportConnection
5599 | notes(first: Int): NoteConnection
5600 | opinions(first: Int): OpinionConnection
5601 | observedData(first: Int): ObservedDataConnection
5602 | groupings(first: Int): GroupingConnection
5603 | cases(first: Int): CaseConnection
5604 | stixCoreRelationships(
5605 | first: Int
5606 | after: ID
5607 | orderBy: StixCoreRelationshipsOrdering
5608 | orderMode: OrderingMode
5609 | fromId: StixRef
5610 | toId: StixRef
5611 | fromTypes: [String]
5612 | toTypes: [String]
5613 | relationship_type: String
5614 | startTimeStart: DateTime
5615 | startTimeStop: DateTime
5616 | stopTimeStart: DateTime
5617 | stopTimeStop: DateTime
5618 | firstSeenStart: DateTime
5619 | firstSeenStop: DateTime
5620 | lastSeenStart: DateTime
5621 | lastSeenStop: DateTime
5622 | confidences: [Int]
5623 | search: String
5624 | filters: FilterGroup
5625 | ): StixCoreRelationshipConnection
5626 | stixCoreObjectsDistribution(
5627 | relationship_type: [String]
5628 | toTypes: [String]
5629 | field: String!
5630 | startDate: DateTime
5631 | endDate: DateTime
5632 | dateAttribute: String
5633 | operation: StatsOperation!
5634 | limit: Int
5635 | order: String
5636 | types: [String]
5637 | filters: FilterGroup
5638 | search: String
5639 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5640 | stixCoreRelationshipsDistribution(
5641 | field: String!
5642 | operation: StatsOperation!
5643 | startDate: DateTime
5644 | endDate: DateTime
5645 | dateAttribute: String
5646 | isTo: Boolean
5647 | limit: Int
5648 | order: String
5649 | elementWithTargetTypes: [String]
5650 | fromId: [String]
5651 | fromRole: String
5652 | fromTypes: [String]
5653 | toId: [String]
5654 | toRole: String
5655 | toTypes: [String]
5656 | relationship_type: [String]
5657 | confidences: [Int]
5658 | search: String
5659 | filters: FilterGroup
5660 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5661 | opinions_metrics: OpinionsMetrics
5662 | # StixDomainObject
5663 | revoked: Boolean!
5664 | confidence: Int
5665 | lang: String
5666 | created: DateTime
5667 | modified: DateTime
5668 | x_opencti_graph_data: String
5669 | objectAssignee: [Assignee!]
5670 | objectParticipant: [Participant!]
5671 | avatar: OpenCtiFile
5672 | # Location
5673 | name: String!
5674 | description: String
5675 | latitude: Float
5676 | longitude: Float
5677 | precision: Float
5678 | x_opencti_aliases: [String]
5679 | # Position
5680 | street_address: String
5681 | postal_code: String
5682 | city: City
5683 | # Technical
5684 | creators: [Creator!]
5685 | toStix: String
5686 | importFiles(
5687 | first: Int
5688 | prefixMimeType: String
5689 | after: ID
5690 | orderBy: FileOrdering
5691 | orderMode: OrderingMode
5692 | search: String
5693 | filters: FilterGroup
5694 | ): FileConnection
5695 | pendingFiles(
5696 | first: Int
5697 | after: ID
5698 | orderBy: FileOrdering
5699 | orderMode: OrderingMode
5700 | search: String
5701 | filters: FilterGroup
5702 | ): FileConnection
5703 | exportFiles(first: Int): FileConnection
5704 | editContext: [EditUserContext!]
5705 | connectors(onlyAlive: Boolean): [Connector]
5706 | jobs(first: Int): [Work]
5707 | status: Status
5708 | workflowEnabled: Boolean
5709 | }
5710 | input PositionAddInput {
5711 | stix_id: StixId
5712 | x_opencti_stix_ids: [StixId]
5713 | name: String! @constraint(minLength: 2, format: "not-blank")
5714 | description: String
5715 | latitude: Float
5716 | longitude: Float
5717 | precision: Float
5718 | street_address: String
5719 | postal_code: String
5720 | confidence: Int
5721 | revoked: Boolean
5722 | lang: String
5723 | x_opencti_aliases: [String]
5724 | createdBy: String
5725 | objectMarking: [String]
5726 | objectLabel: [String]
5727 | externalReferences: [String]
5728 | created: DateTime
5729 | modified: DateTime
5730 | x_opencti_workflow_id: String
5731 | clientMutationId: String
5732 | update: Boolean
5733 | file: Upload
5734 | }
5735 |
5736 | ################ Cities
5737 | enum CitiesOrdering {
5738 | name
5739 | aliases
5740 | created
5741 | modified
5742 | created_at
5743 | updated_at
5744 | objectMarking
5745 | objectLabel
5746 | x_opencti_workflow_id
5747 | _score
5748 | }
5749 | type CityConnection {
5750 | pageInfo: PageInfo!
5751 | edges: [CityEdge]
5752 | }
5753 | type CityEdge {
5754 | cursor: String!
5755 | node: City!
5756 | }
5757 | type City implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Location {
5758 | id: ID! # internal_id
5759 | standard_id: String!
5760 | entity_type: String!
5761 | parent_types: [String]!
5762 | # StixObject
5763 | representative: Representative!
5764 | x_opencti_stix_ids: [StixId]
5765 | is_inferred: Boolean!
5766 | spec_version: String!
5767 | created_at: DateTime!
5768 | updated_at: DateTime!
5769 | draftVersion: DraftVersion
5770 | # inferences
5771 | x_opencti_inferences: [Inference]
5772 | # StixCoreObject
5773 | createdBy: Identity
5774 | numberOfConnectedElement: Int!
5775 | objectMarking: [MarkingDefinition!]
5776 | objectOrganization: [Organization!]
5777 | objectLabel: [Label!]
5778 | externalReferences(first: Int): ExternalReferenceConnection
5779 | containersNumber: Number
5780 | containers(first: Int, entityTypes: [String!]): ContainerConnection
5781 | reports(first: Int): ReportConnection
5782 | notes(first: Int): NoteConnection
5783 | opinions(first: Int): OpinionConnection
5784 | observedData(first: Int): ObservedDataConnection
5785 | groupings(first: Int): GroupingConnection
5786 | cases(first: Int): CaseConnection
5787 | stixCoreRelationships(
5788 | first: Int
5789 | after: ID
5790 | orderBy: StixCoreRelationshipsOrdering
5791 | orderMode: OrderingMode
5792 | fromId: StixRef
5793 | toId: StixRef
5794 | fromTypes: [String]
5795 | toTypes: [String]
5796 | relationship_type: String
5797 | startTimeStart: DateTime
5798 | startTimeStop: DateTime
5799 | stopTimeStart: DateTime
5800 | stopTimeStop: DateTime
5801 | firstSeenStart: DateTime
5802 | firstSeenStop: DateTime
5803 | lastSeenStart: DateTime
5804 | lastSeenStop: DateTime
5805 | confidences: [Int]
5806 | search: String
5807 | filters: FilterGroup
5808 | ): StixCoreRelationshipConnection
5809 | stixCoreObjectsDistribution(
5810 | relationship_type: [String]
5811 | toTypes: [String]
5812 | field: String!
5813 | startDate: DateTime
5814 | endDate: DateTime
5815 | dateAttribute: String
5816 | operation: StatsOperation!
5817 | limit: Int
5818 | order: String
5819 | types: [String]
5820 | filters: FilterGroup
5821 | search: String
5822 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5823 | stixCoreRelationshipsDistribution(
5824 | field: String!
5825 | operation: StatsOperation!
5826 | startDate: DateTime
5827 | endDate: DateTime
5828 | dateAttribute: String
5829 | isTo: Boolean
5830 | limit: Int
5831 | order: String
5832 | elementWithTargetTypes: [String]
5833 | fromId: [String]
5834 | fromRole: String
5835 | fromTypes: [String]
5836 | toId: [String]
5837 | toRole: String
5838 | toTypes: [String]
5839 | relationship_type: [String]
5840 | confidences: [Int]
5841 | search: String
5842 | filters: FilterGroup
5843 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
5844 | opinions_metrics: OpinionsMetrics
5845 | # StixDomainObject
5846 | revoked: Boolean!
5847 | confidence: Int
5848 | lang: String
5849 | created: DateTime
5850 | modified: DateTime
5851 | x_opencti_graph_data: String
5852 | objectAssignee: [Assignee!]
5853 | objectParticipant: [Participant!]
5854 | avatar: OpenCtiFile
5855 | # Location
5856 | name: String!
5857 | description: String
5858 | latitude: Float
5859 | longitude: Float
5860 | precision: Float
5861 | x_opencti_aliases: [String]
5862 | # City
5863 | country: Country
5864 | administrativeArea: AdministrativeArea
5865 | # Technical
5866 | creators: [Creator!]
5867 | toStix: String
5868 | importFiles(
5869 | first: Int
5870 | prefixMimeType: String
5871 | after: ID
5872 | orderBy: FileOrdering
5873 | orderMode: OrderingMode
5874 | search: String
5875 | filters: FilterGroup
5876 | ): FileConnection
5877 | pendingFiles(
5878 | first: Int
5879 | after: ID
5880 | orderBy: FileOrdering
5881 | orderMode: OrderingMode
5882 | search: String
5883 | filters: FilterGroup
5884 | ): FileConnection
5885 | exportFiles(first: Int): FileConnection
5886 | editContext: [EditUserContext!]
5887 | connectors(onlyAlive: Boolean): [Connector]
5888 | jobs(first: Int): [Work]
5889 | status: Status
5890 | workflowEnabled: Boolean
5891 | }
5892 | input CityAddInput {
5893 | stix_id: StixId
5894 | x_opencti_stix_ids: [StixId]
5895 | name: String! @constraint(minLength: 2, format: "not-blank")
5896 | description: String
5897 | latitude: Float
5898 | longitude: Float
5899 | precision: Float
5900 | confidence: Int
5901 | revoked: Boolean
5902 | lang: String
5903 | x_opencti_aliases: [String]
5904 | createdBy: String
5905 | objectOrganization: [String]
5906 | objectMarking: [String]
5907 | objectLabel: [String]
5908 | externalReferences: [String]
5909 | created: DateTime
5910 | modified: DateTime
5911 | x_opencti_workflow_id: String
5912 | clientMutationId: String
5913 | update: Boolean
5914 | file: Upload
5915 | }
5916 |
5917 | enum CountriesOrdering {
5918 | name
5919 | created
5920 | modified
5921 | created_at
5922 | updated_at
5923 | x_opencti_workflow_id
5924 | _score
5925 | }
5926 | type CountryConnection {
5927 | pageInfo: PageInfo!
5928 | edges: [CountryEdge!]!
5929 | }
5930 | type CountryEdge {
5931 | cursor: String!
5932 | node: Country!
5933 | }
5934 | type Country implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Location {
5935 | id: ID! # internal_id
5936 | standard_id: String!
5937 | entity_type: String!
5938 | parent_types: [String]!
5939 | # StixObject
5940 | representative: Representative!
5941 | x_opencti_stix_ids: [StixId]
5942 | is_inferred: Boolean!
5943 | spec_version: String!
5944 | created_at: DateTime!
5945 | updated_at: DateTime!
5946 | draftVersion: DraftVersion
5947 | # inferences
5948 | x_opencti_inferences: [Inference]
5949 | # StixCoreObject
5950 | createdBy: Identity
5951 | numberOfConnectedElement: Int!
5952 | objectMarking: [MarkingDefinition!]
5953 | objectOrganization: [Organization!]
5954 | objectLabel: [Label!]
5955 | externalReferences(first: Int): ExternalReferenceConnection
5956 | containersNumber: Number
5957 | containers(first: Int, entityTypes: [String!]): ContainerConnection
5958 | reports(first: Int): ReportConnection
5959 | notes(first: Int): NoteConnection
5960 | opinions(first: Int): OpinionConnection
5961 | observedData(first: Int): ObservedDataConnection
5962 | groupings(first: Int): GroupingConnection
5963 | cases(first: Int): CaseConnection
5964 | stixCoreRelationships(
5965 | first: Int
5966 | after: ID
5967 | orderBy: StixCoreRelationshipsOrdering
5968 | orderMode: OrderingMode
5969 | fromId: StixRef
5970 | toId: StixRef
5971 | fromTypes: [String]
5972 | toTypes: [String]
5973 | relationship_type: String
5974 | startTimeStart: DateTime
5975 | startTimeStop: DateTime
5976 | stopTimeStart: DateTime
5977 | stopTimeStop: DateTime
5978 | firstSeenStart: DateTime
5979 | firstSeenStop: DateTime
5980 | lastSeenStart: DateTime
5981 | lastSeenStop: DateTime
5982 | confidences: [Int]
5983 | search: String
5984 | filters: FilterGroup
5985 | ): StixCoreRelationshipConnection
5986 | stixCoreObjectsDistribution(
5987 | relationship_type: [String]
5988 | toTypes: [String]
5989 | field: String!
5990 | startDate: DateTime
5991 | endDate: DateTime
5992 | dateAttribute: String
5993 | operation: StatsOperation!
5994 | limit: Int
5995 | order: String
5996 | types: [String]
5997 | filters: FilterGroup
5998 | search: String
5999 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6000 | stixCoreRelationshipsDistribution(
6001 | field: String!
6002 | operation: StatsOperation!
6003 | startDate: DateTime
6004 | endDate: DateTime
6005 | dateAttribute: String
6006 | isTo: Boolean
6007 | limit: Int
6008 | order: String
6009 | elementWithTargetTypes: [String]
6010 | fromId: [String]
6011 | fromRole: String
6012 | fromTypes: [String]
6013 | toId: [String]
6014 | toRole: String
6015 | toTypes: [String]
6016 | relationship_type: [String]
6017 | confidences: [Int]
6018 | search: String
6019 | filters: FilterGroup
6020 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6021 | opinions_metrics: OpinionsMetrics
6022 | # StixDomainObject
6023 | revoked: Boolean!
6024 | confidence: Int
6025 | lang: String
6026 | created: DateTime
6027 | modified: DateTime
6028 | x_opencti_graph_data: String
6029 | objectAssignee: [Assignee!]
6030 | objectParticipant: [Participant!]
6031 | avatar: OpenCtiFile
6032 | # Location
6033 | name: String!
6034 | description: String
6035 | latitude: Float
6036 | longitude: Float
6037 | precision: Float
6038 | x_opencti_aliases: [String]
6039 | # Country
6040 | region: Region
6041 | # Technical
6042 | creators: [Creator!]
6043 | toStix: String
6044 | importFiles(
6045 | first: Int
6046 | prefixMimeType: String
6047 | after: ID
6048 | orderBy: FileOrdering
6049 | orderMode: OrderingMode
6050 | search: String
6051 | filters: FilterGroup
6052 | ): FileConnection
6053 | pendingFiles(
6054 | first: Int
6055 | after: ID
6056 | orderBy: FileOrdering
6057 | orderMode: OrderingMode
6058 | search: String
6059 | filters: FilterGroup
6060 | ): FileConnection
6061 | exportFiles(first: Int): FileConnection
6062 | editContext: [EditUserContext!]
6063 | connectors(onlyAlive: Boolean): [Connector]
6064 | jobs(first: Int): [Work]
6065 | status: Status
6066 | workflowEnabled: Boolean
6067 | }
6068 | input CountryAddInput {
6069 | stix_id: StixId
6070 | x_opencti_stix_ids: [StixId]
6071 | name: String! @constraint(minLength: 2, format: "not-blank")
6072 | description: String
6073 | latitude: Float
6074 | longitude: Float
6075 | precision: Float
6076 | confidence: Int
6077 | revoked: Boolean
6078 | lang: String
6079 | x_opencti_aliases: [String]
6080 | createdBy: String
6081 | objectMarking: [String]
6082 | objectLabel: [String]
6083 | externalReferences: [String]
6084 | created: DateTime
6085 | modified: DateTime
6086 | x_opencti_workflow_id: String
6087 | clientMutationId: String
6088 | update: Boolean
6089 | file: Upload
6090 | }
6091 |
6092 | ################ Regions
6093 | enum RegionsOrdering {
6094 | name
6095 | created
6096 | modified
6097 | created_at
6098 | updated_at
6099 | x_opencti_workflow_id
6100 | _score
6101 | }
6102 | type RegionConnection {
6103 | pageInfo: PageInfo!
6104 | edges: [RegionEdge]
6105 | }
6106 | type RegionEdge {
6107 | cursor: String!
6108 | node: Region!
6109 | }
6110 | type Region implements BasicObject & StixObject & StixCoreObject & StixDomainObject & Location {
6111 | id: ID! # internal_id
6112 | standard_id: String!
6113 | entity_type: String!
6114 | parent_types: [String]!
6115 | # StixObject
6116 | representative: Representative!
6117 | x_opencti_stix_ids: [StixId]
6118 | is_inferred: Boolean!
6119 | spec_version: String!
6120 | created_at: DateTime!
6121 | updated_at: DateTime!
6122 | draftVersion: DraftVersion
6123 | # inferences
6124 | x_opencti_inferences: [Inference]
6125 | # StixCoreObject
6126 | createdBy: Identity
6127 | numberOfConnectedElement: Int!
6128 | objectMarking: [MarkingDefinition!]
6129 | objectOrganization: [Organization!]
6130 | objectLabel: [Label!]
6131 | externalReferences(first: Int): ExternalReferenceConnection
6132 | containersNumber: Number
6133 | containers(first: Int, entityTypes: [String!]): ContainerConnection
6134 | reports(first: Int): ReportConnection
6135 | notes(first: Int): NoteConnection
6136 | opinions(first: Int): OpinionConnection
6137 | observedData(first: Int): ObservedDataConnection
6138 | groupings(first: Int): GroupingConnection
6139 | cases(first: Int): CaseConnection
6140 | stixCoreRelationships(
6141 | first: Int
6142 | after: ID
6143 | orderBy: StixCoreRelationshipsOrdering
6144 | orderMode: OrderingMode
6145 | fromId: StixRef
6146 | toId: StixRef
6147 | fromTypes: [String]
6148 | toTypes: [String]
6149 | relationship_type: String
6150 | startTimeStart: DateTime
6151 | startTimeStop: DateTime
6152 | stopTimeStart: DateTime
6153 | stopTimeStop: DateTime
6154 | firstSeenStart: DateTime
6155 | firstSeenStop: DateTime
6156 | lastSeenStart: DateTime
6157 | lastSeenStop: DateTime
6158 | confidences: [Int]
6159 | search: String
6160 | filters: FilterGroup
6161 | ): StixCoreRelationshipConnection
6162 | stixCoreObjectsDistribution(
6163 | relationship_type: [String]
6164 | toTypes: [String]
6165 | field: String!
6166 | startDate: DateTime
6167 | endDate: DateTime
6168 | dateAttribute: String
6169 | operation: StatsOperation!
6170 | limit: Int
6171 | order: String
6172 | types: [String]
6173 | filters: FilterGroup
6174 | search: String
6175 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6176 | stixCoreRelationshipsDistribution(
6177 | field: String!
6178 | operation: StatsOperation!
6179 | startDate: DateTime
6180 | endDate: DateTime
6181 | dateAttribute: String
6182 | isTo: Boolean
6183 | limit: Int
6184 | order: String
6185 | elementWithTargetTypes: [String]
6186 | fromId: [String]
6187 | fromRole: String
6188 | fromTypes: [String]
6189 | toId: [String]
6190 | toRole: String
6191 | toTypes: [String]
6192 | relationship_type: [String]
6193 | confidences: [Int]
6194 | search: String
6195 | filters: FilterGroup
6196 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6197 | opinions_metrics: OpinionsMetrics
6198 | # StixDomainObject
6199 | revoked: Boolean!
6200 | confidence: Int
6201 | lang: String
6202 | created: DateTime
6203 | modified: DateTime
6204 | x_opencti_graph_data: String
6205 | objectAssignee: [Assignee!]
6206 | objectParticipant: [Participant!]
6207 | avatar: OpenCtiFile
6208 | # Location
6209 | name: String!
6210 | description: String
6211 | latitude: Float
6212 | longitude: Float
6213 | precision: Float
6214 | x_opencti_aliases: [String]
6215 | # Region
6216 | parentRegions: RegionConnection
6217 | subRegions: RegionConnection
6218 | countries: CountryConnection
6219 | # Technical
6220 | creators: [Creator!]
6221 | toStix: String
6222 | importFiles(
6223 | first: Int
6224 | prefixMimeType: String
6225 | after: ID
6226 | orderBy: FileOrdering
6227 | orderMode: OrderingMode
6228 | search: String
6229 | filters: FilterGroup
6230 | ): FileConnection
6231 | pendingFiles(
6232 | first: Int
6233 | after: ID
6234 | orderBy: FileOrdering
6235 | orderMode: OrderingMode
6236 | search: String
6237 | filters: FilterGroup
6238 | ): FileConnection
6239 | exportFiles(first: Int): FileConnection
6240 | editContext: [EditUserContext!]
6241 | connectors(onlyAlive: Boolean): [Connector]
6242 | jobs(first: Int): [Work]
6243 | status: Status
6244 | workflowEnabled: Boolean
6245 | }
6246 | input RegionAddInput {
6247 | stix_id: StixId
6248 | x_opencti_stix_ids: [StixId]
6249 | name: String! @constraint(minLength: 2, format: "not-blank")
6250 | description: String
6251 | latitude: Float
6252 | longitude: Float
6253 | precision: Float
6254 | confidence: Int
6255 | revoked: Boolean
6256 | lang: String
6257 | x_opencti_aliases: [String]
6258 | createdBy: String
6259 | objectMarking: [String]
6260 | objectLabel: [String]
6261 | externalReferences: [String]
6262 | created: DateTime
6263 | modified: DateTime
6264 | x_opencti_workflow_id: String
6265 | clientMutationId: String
6266 | update: Boolean
6267 | file: Upload
6268 | }
6269 |
6270 | ############## Malware
6271 | enum MalwaresOrdering {
6272 | name
6273 | malware_types
6274 | first_seen
6275 | last_seen
6276 | created
6277 | modified
6278 | created_at
6279 | updated_at
6280 | objectMarking
6281 | objectLabel
6282 | x_opencti_workflow_id
6283 | is_family
6284 | confidence
6285 | _score
6286 | }
6287 | type MalwareConnection {
6288 | pageInfo: PageInfo!
6289 | edges: [MalwareEdge]
6290 | }
6291 | type MalwareEdge {
6292 | cursor: String!
6293 | node: Malware!
6294 | }
6295 | type Malware implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
6296 | id: ID! # internal_id
6297 | standard_id: String!
6298 | entity_type: String!
6299 | parent_types: [String]!
6300 | # StixObject
6301 | representative: Representative!
6302 | x_opencti_stix_ids: [StixId]
6303 | is_inferred: Boolean!
6304 | spec_version: String!
6305 | created_at: DateTime!
6306 | updated_at: DateTime!
6307 | draftVersion: DraftVersion
6308 | # inferences
6309 | x_opencti_inferences: [Inference]
6310 | # StixCoreObject
6311 | createdBy: Identity
6312 | numberOfConnectedElement: Int!
6313 | objectMarking: [MarkingDefinition!]
6314 | objectOrganization: [Organization!]
6315 | objectLabel: [Label!]
6316 | externalReferences(first: Int): ExternalReferenceConnection
6317 | containersNumber: Number
6318 | containers(first: Int, entityTypes: [String!]): ContainerConnection
6319 | reports(first: Int): ReportConnection
6320 | notes(first: Int): NoteConnection
6321 | opinions(first: Int): OpinionConnection
6322 | observedData(first: Int): ObservedDataConnection
6323 | groupings(first: Int): GroupingConnection
6324 | cases(first: Int): CaseConnection
6325 | stixCoreRelationships(
6326 | first: Int
6327 | after: ID
6328 | orderBy: StixCoreRelationshipsOrdering
6329 | orderMode: OrderingMode
6330 | fromId: StixRef
6331 | toId: StixRef
6332 | fromTypes: [String]
6333 | toTypes: [String]
6334 | relationship_type: String
6335 | startTimeStart: DateTime
6336 | startTimeStop: DateTime
6337 | stopTimeStart: DateTime
6338 | stopTimeStop: DateTime
6339 | firstSeenStart: DateTime
6340 | firstSeenStop: DateTime
6341 | lastSeenStart: DateTime
6342 | lastSeenStop: DateTime
6343 | confidences: [Int]
6344 | search: String
6345 | filters: FilterGroup
6346 | ): StixCoreRelationshipConnection
6347 | stixCoreObjectsDistribution(
6348 | relationship_type: [String]
6349 | toTypes: [String]
6350 | field: String!
6351 | startDate: DateTime
6352 | endDate: DateTime
6353 | dateAttribute: String
6354 | operation: StatsOperation!
6355 | limit: Int
6356 | order: String
6357 | types: [String]
6358 | filters: FilterGroup
6359 | search: String
6360 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6361 | stixCoreRelationshipsDistribution(
6362 | field: String!
6363 | operation: StatsOperation!
6364 | startDate: DateTime
6365 | endDate: DateTime
6366 | dateAttribute: String
6367 | isTo: Boolean
6368 | limit: Int
6369 | order: String
6370 | elementWithTargetTypes: [String]
6371 | fromId: [String]
6372 | fromRole: String
6373 | fromTypes: [String]
6374 | toId: [String]
6375 | toRole: String
6376 | toTypes: [String]
6377 | relationship_type: [String]
6378 | confidences: [Int]
6379 | search: String
6380 | filters: FilterGroup
6381 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6382 | opinions_metrics: OpinionsMetrics
6383 | # StixDomainObject
6384 | revoked: Boolean!
6385 | confidence: Int
6386 | lang: String
6387 | created: DateTime
6388 | modified: DateTime
6389 | x_opencti_graph_data: String
6390 | objectAssignee: [Assignee!]
6391 | objectParticipant: [Participant!]
6392 | avatar: OpenCtiFile
6393 | # Malware
6394 | name: String!
6395 | description: String
6396 | aliases: [String]
6397 | malware_types: [String]
6398 | is_family: Boolean
6399 | first_seen: DateTime
6400 | last_seen: DateTime
6401 | architecture_execution_envs: [String]
6402 | implementation_languages: [String]
6403 | capabilities: [String]
6404 | killChainPhases: [KillChainPhase!]
6405 | samples: [StixCyberObservable!]
6406 | # Technical
6407 | creators: [Creator!]
6408 | toStix: String
6409 | importFiles(
6410 | first: Int
6411 | prefixMimeType: String
6412 | after: ID
6413 | orderBy: FileOrdering
6414 | orderMode: OrderingMode
6415 | search: String
6416 | filters: FilterGroup
6417 | ): FileConnection
6418 | pendingFiles(
6419 | first: Int
6420 | after: ID
6421 | orderBy: FileOrdering
6422 | orderMode: OrderingMode
6423 | search: String
6424 | filters: FilterGroup
6425 | ): FileConnection
6426 | exportFiles(first: Int): FileConnection
6427 | editContext: [EditUserContext!]
6428 | connectors(onlyAlive: Boolean): [Connector]
6429 | jobs(first: Int): [Work]
6430 | status: Status
6431 | workflowEnabled: Boolean
6432 | }
6433 | input MalwareAddInput {
6434 | stix_id: StixId
6435 | x_opencti_stix_ids: [StixId]
6436 | name: String! @constraint(minLength: 2, format: "not-blank")
6437 | description: String
6438 | malware_types: [String]
6439 | aliases: [String]
6440 | is_family: Boolean
6441 | first_seen: DateTime
6442 | last_seen: DateTime
6443 | architecture_execution_envs: [String]
6444 | implementation_languages: [String]
6445 | capabilities: [String]
6446 | confidence: Int
6447 | revoked: Boolean
6448 | lang: String
6449 | createdBy: String
6450 | objectMarking: [String]
6451 | objectAssignee: [String]
6452 | objectOrganization: [String]
6453 | objectLabel: [String]
6454 | externalReferences: [String]
6455 | killChainPhases: [String]
6456 | samples: [String]
6457 | created: DateTime
6458 | modified: DateTime
6459 | x_opencti_workflow_id: String
6460 | clientMutationId: String
6461 | update: Boolean
6462 | file: Upload
6463 | }
6464 |
6465 | ############## ThreatActorsGroup
6466 | enum ThreatActorsOrdering {
6467 | name
6468 | created
6469 | modified
6470 | created_at
6471 | updated_at
6472 | x_opencti_workflow_id
6473 | confidence
6474 | sophistication
6475 | resource_level
6476 | _score
6477 | threat_actor_types
6478 | objectMarking
6479 | }
6480 | type ThreatActorGroupConnection {
6481 | pageInfo: PageInfo!
6482 | edges: [ThreatActorGroupEdge]
6483 | }
6484 |
6485 | type ThreatActorGroupEdge {
6486 | cursor: String!
6487 | node: ThreatActorGroup!
6488 | }
6489 |
6490 | interface ThreatActor implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
6491 | id: ID! # internal_id
6492 | standard_id: String!
6493 | entity_type: String!
6494 | parent_types: [String]!
6495 | # StixObject
6496 | representative: Representative!
6497 | x_opencti_stix_ids: [StixId]
6498 | is_inferred: Boolean!
6499 | spec_version: String!
6500 | created_at: DateTime!
6501 | updated_at: DateTime!
6502 | draftVersion: DraftVersion
6503 | # inferences
6504 | x_opencti_inferences: [Inference]
6505 | # StixCoreObject
6506 | createdBy: Identity
6507 | numberOfConnectedElement: Int!
6508 | objectMarking: [MarkingDefinition!]
6509 | objectOrganization: [Organization!]
6510 | objectLabel: [Label!]
6511 | externalReferences(first: Int): ExternalReferenceConnection
6512 | containersNumber: Number
6513 | containers(first: Int, entityTypes: [String!]): ContainerConnection
6514 | reports(first: Int): ReportConnection
6515 | notes(first: Int): NoteConnection
6516 | opinions(first: Int): OpinionConnection
6517 | observedData(first: Int): ObservedDataConnection
6518 | groupings(first: Int): GroupingConnection
6519 | cases(first: Int): CaseConnection
6520 | stixCoreRelationships(
6521 | first: Int
6522 | after: ID
6523 | orderBy: StixCoreRelationshipsOrdering
6524 | orderMode: OrderingMode
6525 | fromId: StixRef
6526 | toId: StixRef
6527 | fromTypes: [String]
6528 | toTypes: [String]
6529 | relationship_type: String
6530 | startTimeStart: DateTime
6531 | startTimeStop: DateTime
6532 | stopTimeStart: DateTime
6533 | stopTimeStop: DateTime
6534 | firstSeenStart: DateTime
6535 | firstSeenStop: DateTime
6536 | lastSeenStart: DateTime
6537 | lastSeenStop: DateTime
6538 | confidences: [Int]
6539 | search: String
6540 | filters: FilterGroup
6541 | ): StixCoreRelationshipConnection
6542 | stixCoreObjectsDistribution(
6543 | relationship_type: [String]
6544 | toTypes: [String]
6545 | field: String!
6546 | startDate: DateTime
6547 | endDate: DateTime
6548 | dateAttribute: String
6549 | operation: StatsOperation!
6550 | limit: Int
6551 | order: String
6552 | types: [String]
6553 | filters: FilterGroup
6554 | search: String
6555 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6556 | stixCoreRelationshipsDistribution(
6557 | field: String!
6558 | operation: StatsOperation!
6559 | startDate: DateTime
6560 | endDate: DateTime
6561 | dateAttribute: String
6562 | isTo: Boolean
6563 | limit: Int
6564 | order: String
6565 | elementWithTargetTypes: [String]
6566 | fromId: [String]
6567 | fromRole: String
6568 | fromTypes: [String]
6569 | toId: [String]
6570 | toRole: String
6571 | toTypes: [String]
6572 | relationship_type: [String]
6573 | confidences: [Int]
6574 | search: String
6575 | filters: FilterGroup
6576 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6577 | opinions_metrics: OpinionsMetrics
6578 | # StixDomainObject
6579 | revoked: Boolean!
6580 | confidence: Int
6581 | lang: String
6582 | created: DateTime
6583 | modified: DateTime
6584 | x_opencti_graph_data: String
6585 | objectAssignee: [Assignee!]
6586 | objectParticipant: [Participant!]
6587 | avatar: OpenCtiFile
6588 | # ThreatActorGroup
6589 | name: String!
6590 | description: String
6591 | aliases: [String]
6592 | threat_actor_types: [String]
6593 | first_seen: DateTime
6594 | last_seen: DateTime
6595 | roles: [String]
6596 | goals: [String]
6597 | sophistication: String
6598 | resource_level: String
6599 | primary_motivation: String
6600 | secondary_motivations: [String]
6601 | personal_motivations: [String]
6602 | locations: LocationConnection
6603 | countries: CountryConnection
6604 | # Technical
6605 | creators: [Creator!]
6606 | toStix: String
6607 | importFiles(
6608 | first: Int
6609 | prefixMimeType: String
6610 | after: ID
6611 | orderBy: FileOrdering
6612 | orderMode: OrderingMode
6613 | search: String
6614 | filters: FilterGroup
6615 | ): FileConnection
6616 | pendingFiles(
6617 | first: Int
6618 | after: ID
6619 | orderBy: FileOrdering
6620 | orderMode: OrderingMode
6621 | search: String
6622 | filters: FilterGroup
6623 | ): FileConnection
6624 | exportFiles(first: Int): FileConnection
6625 | editContext: [EditUserContext!]
6626 | connectors(onlyAlive: Boolean): [Connector]
6627 | jobs(first: Int): [Work]
6628 | status: Status
6629 | workflowEnabled: Boolean
6630 | }
6631 |
6632 | type ThreatActorEdge {
6633 | cursor: String!
6634 | node: ThreatActor!
6635 | }
6636 |
6637 | type ThreatActorConnection {
6638 | pageInfo: PageInfo!
6639 | edges: [ThreatActorEdge]
6640 | }
6641 |
6642 | type ThreatActorGroup implements BasicObject & StixObject & StixCoreObject & StixDomainObject & ThreatActor {
6643 | id: ID! # internal_id
6644 | standard_id: String!
6645 | entity_type: String!
6646 | parent_types: [String]!
6647 | # StixObject
6648 | representative: Representative!
6649 | x_opencti_stix_ids: [StixId]
6650 | is_inferred: Boolean!
6651 | spec_version: String!
6652 | created_at: DateTime!
6653 | updated_at: DateTime!
6654 | draftVersion: DraftVersion
6655 | # inferences
6656 | x_opencti_inferences: [Inference]
6657 | # StixCoreObject
6658 | createdBy: Identity
6659 | numberOfConnectedElement: Int!
6660 | objectMarking: [MarkingDefinition!]
6661 | objectOrganization: [Organization!]
6662 | objectLabel: [Label!]
6663 | externalReferences(first: Int): ExternalReferenceConnection
6664 | containersNumber: Number
6665 | containers(first: Int, entityTypes: [String!]): ContainerConnection
6666 | reports(first: Int): ReportConnection
6667 | notes(first: Int): NoteConnection
6668 | opinions(first: Int): OpinionConnection
6669 | observedData(first: Int): ObservedDataConnection
6670 | groupings(first: Int): GroupingConnection
6671 | cases(first: Int): CaseConnection
6672 | stixCoreRelationships(
6673 | first: Int
6674 | after: ID
6675 | orderBy: StixCoreRelationshipsOrdering
6676 | orderMode: OrderingMode
6677 | fromId: StixRef
6678 | toId: StixRef
6679 | fromTypes: [String]
6680 | toTypes: [String]
6681 | relationship_type: String
6682 | startTimeStart: DateTime
6683 | startTimeStop: DateTime
6684 | stopTimeStart: DateTime
6685 | stopTimeStop: DateTime
6686 | firstSeenStart: DateTime
6687 | firstSeenStop: DateTime
6688 | lastSeenStart: DateTime
6689 | lastSeenStop: DateTime
6690 | confidences: [Int]
6691 | search: String
6692 | filters: FilterGroup
6693 | ): StixCoreRelationshipConnection
6694 | stixCoreObjectsDistribution(
6695 | relationship_type: [String]
6696 | toTypes: [String]
6697 | field: String!
6698 | startDate: DateTime
6699 | endDate: DateTime
6700 | dateAttribute: String
6701 | operation: StatsOperation!
6702 | limit: Int
6703 | order: String
6704 | types: [String]
6705 | filters: FilterGroup
6706 | search: String
6707 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6708 | stixCoreRelationshipsDistribution(
6709 | field: String!
6710 | operation: StatsOperation!
6711 | startDate: DateTime
6712 | endDate: DateTime
6713 | dateAttribute: String
6714 | isTo: Boolean
6715 | limit: Int
6716 | order: String
6717 | elementWithTargetTypes: [String]
6718 | fromId: [String]
6719 | fromRole: String
6720 | fromTypes: [String]
6721 | toId: [String]
6722 | toRole: String
6723 | toTypes: [String]
6724 | relationship_type: [String]
6725 | confidences: [Int]
6726 | search: String
6727 | filters: FilterGroup
6728 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6729 | opinions_metrics: OpinionsMetrics
6730 | # StixDomainObject
6731 | revoked: Boolean!
6732 | confidence: Int
6733 | lang: String
6734 | created: DateTime
6735 | modified: DateTime
6736 | x_opencti_graph_data: String
6737 | objectAssignee: [Assignee!]
6738 | objectParticipant: [Participant!]
6739 | avatar: OpenCtiFile
6740 | # ThreatActorGroup
6741 | name: String!
6742 | description: String
6743 | aliases: [String]
6744 | threat_actor_types: [String]
6745 | first_seen: DateTime
6746 | last_seen: DateTime
6747 | roles: [String]
6748 | goals: [String]
6749 | sophistication: String
6750 | resource_level: String
6751 | primary_motivation: String
6752 | secondary_motivations: [String]
6753 | personal_motivations: [String]
6754 | locations: LocationConnection
6755 | countries: CountryConnection
6756 | # Technical
6757 | creators: [Creator!]
6758 | toStix: String
6759 | importFiles(
6760 | first: Int
6761 | prefixMimeType: String
6762 | after: ID
6763 | orderBy: FileOrdering
6764 | orderMode: OrderingMode
6765 | search: String
6766 | filters: FilterGroup
6767 | ): FileConnection
6768 | pendingFiles(
6769 | first: Int
6770 | after: ID
6771 | orderBy: FileOrdering
6772 | orderMode: OrderingMode
6773 | search: String
6774 | filters: FilterGroup
6775 | ): FileConnection
6776 | exportFiles(first: Int): FileConnection
6777 | editContext: [EditUserContext!]
6778 | connectors(onlyAlive: Boolean): [Connector]
6779 | jobs(first: Int): [Work]
6780 | status: Status
6781 | workflowEnabled: Boolean
6782 | }
6783 |
6784 | input ThreatActorGroupAddInput {
6785 | stix_id: StixId
6786 | x_opencti_stix_ids: [StixId]
6787 | name: String! @constraint(minLength: 2, format: "not-blank")
6788 | description: String
6789 | aliases: [String]
6790 | threat_actor_types: [String]
6791 | first_seen: DateTime
6792 | last_seen: DateTime
6793 | roles: [String]
6794 | goals: [String]
6795 | sophistication: String
6796 | resource_level: String
6797 | primary_motivation: String
6798 | secondary_motivations: [String]
6799 | personal_motivations: [String]
6800 | confidence: Int
6801 | revoked: Boolean
6802 | lang: String
6803 | createdBy: String
6804 | objectMarking: [String]
6805 | objectOrganization: [String]
6806 | objectAssignee: [String]
6807 | objectLabel: [String]
6808 | externalReferences: [String]
6809 | created: DateTime
6810 | modified: DateTime
6811 | x_opencti_workflow_id: String
6812 | clientMutationId: String
6813 | update: Boolean
6814 | file: Upload
6815 | }
6816 |
6817 | ############## Tools
6818 | enum ToolsOrdering {
6819 | name
6820 | created
6821 | modified
6822 | created_at
6823 | updated_at
6824 | x_opencti_workflow_id
6825 | confidence
6826 | _score
6827 | }
6828 | type ToolConnection {
6829 | pageInfo: PageInfo!
6830 | edges: [ToolEdge]
6831 | }
6832 | type ToolEdge {
6833 | cursor: String!
6834 | node: Tool!
6835 | }
6836 | type Tool implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
6837 | id: ID! # internal_id
6838 | standard_id: String!
6839 | entity_type: String!
6840 | parent_types: [String]!
6841 | # StixObject
6842 | representative: Representative!
6843 | x_opencti_stix_ids: [StixId]
6844 | is_inferred: Boolean!
6845 | spec_version: String!
6846 | created_at: DateTime!
6847 | updated_at: DateTime!
6848 | draftVersion: DraftVersion
6849 | # inferences
6850 | x_opencti_inferences: [Inference]
6851 | # StixCoreObject
6852 | createdBy: Identity
6853 | numberOfConnectedElement: Int!
6854 | objectMarking: [MarkingDefinition!]
6855 | objectOrganization: [Organization!]
6856 | objectLabel: [Label!]
6857 | externalReferences(first: Int): ExternalReferenceConnection
6858 | containersNumber: Number
6859 | containers(first: Int, entityTypes: [String!]): ContainerConnection
6860 | reports(first: Int): ReportConnection
6861 | notes(first: Int): NoteConnection
6862 | opinions(first: Int): OpinionConnection
6863 | observedData(first: Int): ObservedDataConnection
6864 | groupings(first: Int): GroupingConnection
6865 | cases(first: Int): CaseConnection
6866 | stixCoreRelationships(
6867 | first: Int
6868 | after: ID
6869 | orderBy: StixCoreRelationshipsOrdering
6870 | orderMode: OrderingMode
6871 | fromId: StixRef
6872 | toId: StixRef
6873 | fromTypes: [String]
6874 | toTypes: [String]
6875 | relationship_type: String
6876 | startTimeStart: DateTime
6877 | startTimeStop: DateTime
6878 | stopTimeStart: DateTime
6879 | stopTimeStop: DateTime
6880 | firstSeenStart: DateTime
6881 | firstSeenStop: DateTime
6882 | lastSeenStart: DateTime
6883 | lastSeenStop: DateTime
6884 | confidences: [Int]
6885 | search: String
6886 | filters: FilterGroup
6887 | ): StixCoreRelationshipConnection
6888 | stixCoreObjectsDistribution(
6889 | relationship_type: [String]
6890 | toTypes: [String]
6891 | field: String!
6892 | startDate: DateTime
6893 | endDate: DateTime
6894 | dateAttribute: String
6895 | operation: StatsOperation!
6896 | limit: Int
6897 | order: String
6898 | types: [String]
6899 | filters: FilterGroup
6900 | search: String
6901 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6902 | stixCoreRelationshipsDistribution(
6903 | field: String!
6904 | operation: StatsOperation!
6905 | startDate: DateTime
6906 | endDate: DateTime
6907 | dateAttribute: String
6908 | isTo: Boolean
6909 | limit: Int
6910 | order: String
6911 | elementWithTargetTypes: [String]
6912 | fromId: [String]
6913 | fromRole: String
6914 | fromTypes: [String]
6915 | toId: [String]
6916 | toRole: String
6917 | toTypes: [String]
6918 | relationship_type: [String]
6919 | confidences: [Int]
6920 | search: String
6921 | filters: FilterGroup
6922 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
6923 | opinions_metrics: OpinionsMetrics
6924 | # StixDomainObject
6925 | revoked: Boolean!
6926 | confidence: Int
6927 | lang: String
6928 | created: DateTime
6929 | modified: DateTime
6930 | x_opencti_graph_data: String
6931 | objectAssignee: [Assignee!]
6932 | objectParticipant: [Participant!]
6933 | avatar: OpenCtiFile
6934 | # Tool
6935 | name: String!
6936 | description: String
6937 | aliases: [String]
6938 | tool_types: [String]
6939 | tool_version: String
6940 | killChainPhases: [KillChainPhase!]
6941 | # Technical
6942 | creators: [Creator!]
6943 | toStix: String
6944 | importFiles(
6945 | first: Int
6946 | prefixMimeType: String
6947 | after: ID
6948 | orderBy: FileOrdering
6949 | orderMode: OrderingMode
6950 | search: String
6951 | filters: FilterGroup
6952 | ): FileConnection
6953 | pendingFiles(
6954 | first: Int
6955 | after: ID
6956 | orderBy: FileOrdering
6957 | orderMode: OrderingMode
6958 | search: String
6959 | filters: FilterGroup
6960 | ): FileConnection
6961 | exportFiles(first: Int): FileConnection
6962 | editContext: [EditUserContext!]
6963 | connectors(onlyAlive: Boolean): [Connector]
6964 | jobs(first: Int): [Work]
6965 | status: Status
6966 | workflowEnabled: Boolean
6967 | }
6968 | input ToolAddInput {
6969 | stix_id: StixId
6970 | x_opencti_stix_ids: [StixId]
6971 | name: String! @constraint(minLength: 2, format: "not-blank")
6972 | description: String
6973 | aliases: [String]
6974 | tool_types: [String]
6975 | tool_version: String
6976 | confidence: Int
6977 | revoked: Boolean
6978 | lang: String
6979 | createdBy: String
6980 | objectMarking: [String]
6981 | objectOrganization: [String]
6982 | objectLabel: [String]
6983 | externalReferences: [String]
6984 | killChainPhases: [String]
6985 | created: DateTime
6986 | modified: DateTime
6987 | x_opencti_workflow_id: String
6988 | clientMutationId: String
6989 | update: Boolean
6990 | file: Upload
6991 | }
6992 |
6993 | ############## Vulnerabilities
6994 | enum VulnerabilitiesOrdering {
6995 | name
6996 | x_opencti_cvss_base_score
6997 | x_opencti_cvss_base_severity
6998 | x_opencti_cvss_attack_vector
6999 | created
7000 | modified
7001 | created_at
7002 | updated_at
7003 | x_opencti_workflow_id
7004 | creator
7005 | confidence
7006 | _score
7007 | }
7008 | type VulnerabilityConnection {
7009 | pageInfo: PageInfo!
7010 | edges: [VulnerabilityEdge]
7011 | }
7012 | type VulnerabilityEdge {
7013 | cursor: String!
7014 | node: Vulnerability!
7015 | }
7016 | type Vulnerability implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
7017 | id: ID! # internal_id
7018 | standard_id: String!
7019 | entity_type: String!
7020 | parent_types: [String]!
7021 | # StixObject
7022 | representative: Representative!
7023 | x_opencti_stix_ids: [StixId]
7024 | is_inferred: Boolean!
7025 | spec_version: String!
7026 | created_at: DateTime!
7027 | updated_at: DateTime!
7028 | draftVersion: DraftVersion
7029 | # inferences
7030 | x_opencti_inferences: [Inference]
7031 | # StixCoreObject
7032 | createdBy: Identity
7033 | numberOfConnectedElement: Int!
7034 | objectMarking: [MarkingDefinition!]
7035 | objectOrganization: [Organization!]
7036 | objectLabel: [Label!]
7037 | externalReferences(first: Int): ExternalReferenceConnection
7038 | containersNumber: Number
7039 | containers(first: Int, entityTypes: [String!]): ContainerConnection
7040 | reports(first: Int): ReportConnection
7041 | notes(first: Int): NoteConnection
7042 | opinions(first: Int): OpinionConnection
7043 | observedData(first: Int): ObservedDataConnection
7044 | groupings(first: Int): GroupingConnection
7045 | cases(first: Int): CaseConnection
7046 | stixCoreRelationships(
7047 | first: Int
7048 | after: ID
7049 | orderBy: StixCoreRelationshipsOrdering
7050 | orderMode: OrderingMode
7051 | fromId: StixRef
7052 | toId: StixRef
7053 | fromTypes: [String]
7054 | toTypes: [String]
7055 | relationship_type: String
7056 | startTimeStart: DateTime
7057 | startTimeStop: DateTime
7058 | stopTimeStart: DateTime
7059 | stopTimeStop: DateTime
7060 | firstSeenStart: DateTime
7061 | firstSeenStop: DateTime
7062 | lastSeenStart: DateTime
7063 | lastSeenStop: DateTime
7064 | confidences: [Int]
7065 | search: String
7066 | filters: FilterGroup
7067 | ): StixCoreRelationshipConnection
7068 | stixCoreObjectsDistribution(
7069 | relationship_type: [String]
7070 | toTypes: [String]
7071 | field: String!
7072 | startDate: DateTime
7073 | endDate: DateTime
7074 | dateAttribute: String
7075 | operation: StatsOperation!
7076 | limit: Int
7077 | order: String
7078 | types: [String]
7079 | filters: FilterGroup
7080 | search: String
7081 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7082 | stixCoreRelationshipsDistribution(
7083 | field: String!
7084 | operation: StatsOperation!
7085 | startDate: DateTime
7086 | endDate: DateTime
7087 | dateAttribute: String
7088 | isTo: Boolean
7089 | limit: Int
7090 | order: String
7091 | elementWithTargetTypes: [String]
7092 | fromId: [String]
7093 | fromRole: String
7094 | fromTypes: [String]
7095 | toId: [String]
7096 | toRole: String
7097 | toTypes: [String]
7098 | relationship_type: [String]
7099 | confidences: [Int]
7100 | search: String
7101 | filters: FilterGroup
7102 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7103 | opinions_metrics: OpinionsMetrics
7104 | # StixDomainObject
7105 | revoked: Boolean!
7106 | confidence: Int
7107 | lang: String
7108 | created: DateTime
7109 | modified: DateTime
7110 | x_opencti_graph_data: String
7111 | objectAssignee: [Assignee!]
7112 | objectParticipant: [Participant!]
7113 | avatar: OpenCtiFile
7114 | # Vulnerability
7115 | name: String!
7116 | description: String
7117 | x_opencti_aliases: [String]
7118 | x_opencti_cvss_base_score: Float
7119 | x_opencti_cvss_base_severity: String
7120 | x_opencti_cvss_attack_vector: String
7121 | x_opencti_cvss_integrity_impact: String
7122 | x_opencti_cvss_availability_impact: String
7123 | x_opencti_cvss_confidentiality_impact: String
7124 | x_opencti_cisa_kev: Boolean
7125 | x_opencti_epss_score: Float
7126 | x_opencti_epss_percentile: Float
7127 | softwares(first: Int, after: ID, orderBy: StixCyberObservablesOrdering, orderMode: OrderingMode): StixCyberObservableConnection
7128 | # Technical
7129 | creators: [Creator!]
7130 | toStix: String
7131 | importFiles(
7132 | first: Int
7133 | prefixMimeType: String
7134 | after: ID
7135 | orderBy: FileOrdering
7136 | orderMode: OrderingMode
7137 | search: String
7138 | filters: FilterGroup
7139 | ): FileConnection
7140 | pendingFiles(
7141 | first: Int
7142 | after: ID
7143 | orderBy: FileOrdering
7144 | orderMode: OrderingMode
7145 | search: String
7146 | filters: FilterGroup
7147 | ): FileConnection
7148 | exportFiles(first: Int): FileConnection
7149 | editContext: [EditUserContext!]
7150 | connectors(onlyAlive: Boolean): [Connector]
7151 | jobs(first: Int): [Work]
7152 | status: Status
7153 | workflowEnabled: Boolean
7154 | }
7155 | input VulnerabilityAddInput {
7156 | stix_id: StixId
7157 | x_opencti_stix_ids: [StixId]
7158 | name: String! @constraint(minLength: 2, format: "not-blank")
7159 | description: String
7160 | x_opencti_aliases: [String]
7161 | x_opencti_cvss_base_score: Float
7162 | x_opencti_cvss_base_severity: String
7163 | x_opencti_cvss_attack_vector: String
7164 | x_opencti_cvss_integrity_impact: String
7165 | x_opencti_cvss_availability_impact: String
7166 | x_opencti_cvss_confidentiality_impact: String
7167 | x_opencti_cisa_kev: Boolean
7168 | x_opencti_epss_score: Float
7169 | x_opencti_epss_percentile: Float
7170 | confidence: Int
7171 | revoked: Boolean
7172 | lang: String
7173 | createdBy: String
7174 | objectMarking: [String]
7175 | objectOrganization: [String]
7176 | objectLabel: [String]
7177 | externalReferences: [String]
7178 | created: DateTime
7179 | modified: DateTime
7180 | x_opencti_workflow_id: String
7181 | clientMutationId: String
7182 | update: Boolean
7183 | file: Upload
7184 | }
7185 |
7186 | ############## Incident
7187 | enum IncidentsOrdering {
7188 | name
7189 | first_seen
7190 | last_seen
7191 | incident_type
7192 | severity
7193 | source
7194 | created
7195 | modified
7196 | created_at
7197 | updated_at
7198 | x_opencti_workflow_id
7199 | objectMarking
7200 | confidence
7201 | objectAssignee
7202 | creator
7203 | _score
7204 | }
7205 | type IncidentConnection {
7206 | pageInfo: PageInfo!
7207 | edges: [IncidentEdge]
7208 | }
7209 | type IncidentEdge {
7210 | cursor: String!
7211 | node: Incident!
7212 | }
7213 | type Incident implements BasicObject & StixObject & StixCoreObject & StixDomainObject {
7214 | id: ID! # internal_id
7215 | standard_id: String!
7216 | entity_type: String!
7217 | parent_types: [String]!
7218 | # StixObject
7219 | representative: Representative!
7220 | x_opencti_stix_ids: [StixId]
7221 | is_inferred: Boolean!
7222 | spec_version: String!
7223 | created_at: DateTime!
7224 | updated_at: DateTime!
7225 | draftVersion: DraftVersion
7226 | # inferences
7227 | x_opencti_inferences: [Inference]
7228 | # StixCoreObject
7229 | createdBy: Identity
7230 | numberOfConnectedElement: Int!
7231 | objectMarking: [MarkingDefinition!]
7232 | objectOrganization: [Organization!]
7233 | objectLabel: [Label!]
7234 | externalReferences(first: Int): ExternalReferenceConnection
7235 | containersNumber: Number
7236 | containers(first: Int, entityTypes: [String!]): ContainerConnection
7237 | reports(first: Int): ReportConnection
7238 | notes(first: Int): NoteConnection
7239 | opinions(first: Int): OpinionConnection
7240 | observedData(first: Int): ObservedDataConnection
7241 | groupings(first: Int): GroupingConnection
7242 | cases(first: Int): CaseConnection
7243 | stixCoreRelationships(
7244 | first: Int
7245 | after: ID
7246 | orderBy: StixCoreRelationshipsOrdering
7247 | orderMode: OrderingMode
7248 | fromId: StixRef
7249 | toId: StixRef
7250 | fromTypes: [String]
7251 | toTypes: [String]
7252 | relationship_type: String
7253 | startTimeStart: DateTime
7254 | startTimeStop: DateTime
7255 | stopTimeStart: DateTime
7256 | stopTimeStop: DateTime
7257 | firstSeenStart: DateTime
7258 | firstSeenStop: DateTime
7259 | lastSeenStart: DateTime
7260 | lastSeenStop: DateTime
7261 | confidences: [Int]
7262 | search: String
7263 | filters: FilterGroup
7264 | ): StixCoreRelationshipConnection
7265 | stixCoreObjectsDistribution(
7266 | relationship_type: [String]
7267 | toTypes: [String]
7268 | field: String!
7269 | startDate: DateTime
7270 | endDate: DateTime
7271 | dateAttribute: String
7272 | operation: StatsOperation!
7273 | limit: Int
7274 | order: String
7275 | types: [String]
7276 | filters: FilterGroup
7277 | search: String
7278 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7279 | stixCoreRelationshipsDistribution(
7280 | field: String!
7281 | operation: StatsOperation!
7282 | startDate: DateTime
7283 | endDate: DateTime
7284 | dateAttribute: String
7285 | isTo: Boolean
7286 | limit: Int
7287 | order: String
7288 | elementWithTargetTypes: [String]
7289 | fromId: [String]
7290 | fromRole: String
7291 | fromTypes: [String]
7292 | toId: [String]
7293 | toRole: String
7294 | toTypes: [String]
7295 | relationship_type: [String]
7296 | confidences: [Int]
7297 | search: String
7298 | filters: FilterGroup
7299 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7300 | opinions_metrics: OpinionsMetrics
7301 | # StixDomainObject
7302 | revoked: Boolean!
7303 | confidence: Int
7304 | lang: String
7305 | created: DateTime
7306 | modified: DateTime
7307 | x_opencti_graph_data: String
7308 | objectAssignee: [Assignee!]
7309 | avatar: OpenCtiFile
7310 | # Incident
7311 | name: String!
7312 | description: String
7313 | aliases: [String]
7314 | first_seen: DateTime
7315 | last_seen: DateTime
7316 | objective: String
7317 | incident_type: String
7318 | severity: String
7319 | source: String
7320 | objectParticipant: [Participant!]
7321 | # Technical
7322 | creators: [Creator!]
7323 | toStix: String
7324 | importFiles(
7325 | first: Int
7326 | prefixMimeType: String
7327 | after: ID
7328 | orderBy: FileOrdering
7329 | orderMode: OrderingMode
7330 | search: String
7331 | filters: FilterGroup
7332 | ): FileConnection
7333 | pendingFiles(
7334 | first: Int
7335 | after: ID
7336 | orderBy: FileOrdering
7337 | orderMode: OrderingMode
7338 | search: String
7339 | filters: FilterGroup
7340 | ): FileConnection
7341 | exportFiles(first: Int): FileConnection
7342 | editContext: [EditUserContext!]
7343 | connectors(onlyAlive: Boolean): [Connector]
7344 | jobs(first: Int): [Work]
7345 | status: Status
7346 | workflowEnabled: Boolean
7347 | }
7348 | input IncidentAddInput {
7349 | stix_id: StixId
7350 | x_opencti_stix_ids: [StixId]
7351 | name: String! @constraint(minLength: 2, format: "not-blank")
7352 | description: String
7353 | confidence: Int
7354 | revoked: Boolean
7355 | lang: String
7356 | objective: String
7357 | first_seen: DateTime
7358 | last_seen: DateTime
7359 | aliases: [String]
7360 | incident_type: String
7361 | severity: String
7362 | source: String
7363 | createdBy: String
7364 | objectOrganization: [String]
7365 | objectMarking: [String]
7366 | objectAssignee: [String]
7367 | objectParticipant: [String]
7368 | objectLabel: [String]
7369 | externalReferences: [String]
7370 | created: DateTime
7371 | modified: DateTime
7372 | x_opencti_workflow_id: String
7373 | clientMutationId: String
7374 | update: Boolean
7375 | file: Upload
7376 | }
7377 |
7378 | ######## STIX CYBER OBSERVABLES ENTITIES
7379 |
7380 | enum StixCyberObservablesOrdering {
7381 | entity_type
7382 | created_at
7383 | updated_at
7384 | observable_value
7385 | objectMarking
7386 | createdBy
7387 | creator
7388 | _score
7389 | }
7390 | type StixCyberObservableConnection {
7391 | pageInfo: PageInfo!
7392 | edges: [StixCyberObservableEdge!]!
7393 | }
7394 | type StixCyberObservableEdge {
7395 | cursor: String!
7396 | node: StixCyberObservable!
7397 | }
7398 | interface StixCyberObservable {
7399 | id: ID! # internal_id
7400 | standard_id: String!
7401 | entity_type: String!
7402 | parent_types: [String]!
7403 | # StixObject
7404 | representative: Representative!
7405 | x_opencti_stix_ids: [StixId]
7406 | is_inferred: Boolean!
7407 | spec_version: String!
7408 | created_at: DateTime!
7409 | updated_at: DateTime!
7410 | draftVersion: DraftVersion
7411 | # StixCoreObject
7412 | createdBy: Identity
7413 | numberOfConnectedElement: Int!
7414 | objectMarking: [MarkingDefinition!]
7415 | objectOrganization: [Organization!]
7416 | objectLabel: [Label!]
7417 | externalReferences(first: Int): ExternalReferenceConnection
7418 | containersNumber: Number
7419 | containers(first: Int, entityTypes: [String!]): ContainerConnection
7420 | reports(first: Int): ReportConnection
7421 | notes(first: Int): NoteConnection
7422 | opinions(first: Int): OpinionConnection
7423 | observedData(first: Int): ObservedDataConnection
7424 | groupings(first: Int): GroupingConnection
7425 | cases(first: Int): CaseConnection
7426 | stixCoreRelationships(
7427 | first: Int
7428 | after: ID
7429 | orderBy: StixCoreRelationshipsOrdering
7430 | orderMode: OrderingMode
7431 | fromId: StixRef
7432 | toId: StixRef
7433 | fromTypes: [String]
7434 | toTypes: [String]
7435 | relationship_type: String
7436 | startTimeStart: DateTime
7437 | startTimeStop: DateTime
7438 | stopTimeStart: DateTime
7439 | stopTimeStop: DateTime
7440 | firstSeenStart: DateTime
7441 | firstSeenStop: DateTime
7442 | lastSeenStart: DateTime
7443 | lastSeenStop: DateTime
7444 | confidences: [Int]
7445 | search: String
7446 | filters: FilterGroup
7447 | ): StixCoreRelationshipConnection
7448 | stixCoreObjectsDistribution(
7449 | relationship_type: [String]
7450 | toTypes: [String]
7451 | field: String!
7452 | startDate: DateTime
7453 | endDate: DateTime
7454 | dateAttribute: String
7455 | operation: StatsOperation!
7456 | limit: Int
7457 | order: String
7458 | types: [String]
7459 | filters: FilterGroup
7460 | search: String
7461 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7462 | stixCoreRelationshipsDistribution(
7463 | field: String!
7464 | operation: StatsOperation!
7465 | startDate: DateTime
7466 | endDate: DateTime
7467 | dateAttribute: String
7468 | isTo: Boolean
7469 | limit: Int
7470 | order: String
7471 | elementWithTargetTypes: [String]
7472 | fromId: [String]
7473 | fromRole: String
7474 | fromTypes: [String]
7475 | toId: [String]
7476 | toRole: String
7477 | toTypes: [String]
7478 | relationship_type: [String]
7479 | confidences: [Int]
7480 | search: String
7481 | filters: FilterGroup
7482 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7483 | opinions_metrics: OpinionsMetrics
7484 | # StixCyberObservable
7485 | x_opencti_score: Int
7486 | x_opencti_description: String
7487 | observable_value: String!
7488 | indicators(first: Int): IndicatorConnection
7489 | # Technical
7490 | creators: [Creator!]
7491 | toStix: String
7492 | importFiles(
7493 | first: Int
7494 | prefixMimeType: String
7495 | after: ID
7496 | orderBy: FileOrdering
7497 | orderMode: OrderingMode
7498 | search: String
7499 | filters: FilterGroup
7500 | ): FileConnection
7501 | pendingFiles(
7502 | first: Int
7503 | after: ID
7504 | orderBy: FileOrdering
7505 | orderMode: OrderingMode
7506 | search: String
7507 | filters: FilterGroup
7508 | ): FileConnection
7509 | exportFiles(first: Int): FileConnection
7510 | editContext: [EditUserContext!]
7511 | connectors(onlyAlive: Boolean): [Connector]
7512 | jobs(first: Int): [Work]
7513 | }
7514 | type AutonomousSystem implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
7515 | id: ID! # internal_id
7516 | standard_id: String!
7517 | entity_type: String!
7518 | parent_types: [String]!
7519 | # StixObject
7520 | representative: Representative!
7521 | x_opencti_stix_ids: [StixId]
7522 | is_inferred: Boolean!
7523 | spec_version: String!
7524 | created_at: DateTime!
7525 | updated_at: DateTime!
7526 | draftVersion: DraftVersion
7527 | # inferences
7528 | x_opencti_inferences: [Inference]
7529 | # StixCoreObject
7530 | createdBy: Identity
7531 | numberOfConnectedElement: Int!
7532 | objectMarking: [MarkingDefinition!]
7533 | objectOrganization: [Organization!]
7534 | objectLabel: [Label!]
7535 | externalReferences(first: Int): ExternalReferenceConnection
7536 | containersNumber: Number
7537 | containers(first: Int, entityTypes: [String!]): ContainerConnection
7538 | reports(first: Int): ReportConnection
7539 | notes(first: Int): NoteConnection
7540 | opinions(first: Int): OpinionConnection
7541 | observedData(first: Int): ObservedDataConnection
7542 | groupings(first: Int): GroupingConnection
7543 | cases(first: Int): CaseConnection
7544 | stixCoreRelationships(
7545 | first: Int
7546 | after: ID
7547 | orderBy: StixCoreRelationshipsOrdering
7548 | orderMode: OrderingMode
7549 | fromId: StixRef
7550 | toId: StixRef
7551 | fromTypes: [String]
7552 | toTypes: [String]
7553 | relationship_type: String
7554 | startTimeStart: DateTime
7555 | startTimeStop: DateTime
7556 | stopTimeStart: DateTime
7557 | stopTimeStop: DateTime
7558 | firstSeenStart: DateTime
7559 | firstSeenStop: DateTime
7560 | lastSeenStart: DateTime
7561 | lastSeenStop: DateTime
7562 | confidences: [Int]
7563 | search: String
7564 | filters: FilterGroup
7565 | ): StixCoreRelationshipConnection
7566 | stixCoreObjectsDistribution(
7567 | relationship_type: [String]
7568 | toTypes: [String]
7569 | field: String!
7570 | startDate: DateTime
7571 | endDate: DateTime
7572 | dateAttribute: String
7573 | operation: StatsOperation!
7574 | limit: Int
7575 | order: String
7576 | types: [String]
7577 | filters: FilterGroup
7578 | search: String
7579 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7580 | stixCoreRelationshipsDistribution(
7581 | field: String!
7582 | operation: StatsOperation!
7583 | startDate: DateTime
7584 | endDate: DateTime
7585 | dateAttribute: String
7586 | isTo: Boolean
7587 | limit: Int
7588 | order: String
7589 | elementWithTargetTypes: [String]
7590 | fromId: [String]
7591 | fromRole: String
7592 | fromTypes: [String]
7593 | toId: [String]
7594 | toRole: String
7595 | toTypes: [String]
7596 | relationship_type: [String]
7597 | confidences: [Int]
7598 | search: String
7599 | filters: FilterGroup
7600 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7601 | opinions_metrics: OpinionsMetrics
7602 | # StixCyberObservable
7603 | x_opencti_score: Int
7604 | x_opencti_description: String
7605 | observable_value: String!
7606 | indicators(first: Int): IndicatorConnection
7607 | # AutonomousSystem
7608 | number: Int
7609 | name: String
7610 | rir: String
7611 | # Technical
7612 | creators: [Creator!]
7613 | toStix: String
7614 | importFiles(
7615 | first: Int
7616 | prefixMimeType: String
7617 | after: ID
7618 | orderBy: FileOrdering
7619 | orderMode: OrderingMode
7620 | search: String
7621 | filters: FilterGroup
7622 | ): FileConnection
7623 | pendingFiles(
7624 | first: Int
7625 | after: ID
7626 | orderBy: FileOrdering
7627 | orderMode: OrderingMode
7628 | search: String
7629 | filters: FilterGroup
7630 | ): FileConnection
7631 | exportFiles(first: Int): FileConnection
7632 | editContext: [EditUserContext!]
7633 | connectors(onlyAlive: Boolean): [Connector]
7634 | jobs(first: Int): [Work]
7635 | }
7636 | input AutonomousSystemAddInput {
7637 | number: Int!
7638 | name: String
7639 | rir: String
7640 | file: Upload
7641 | }
7642 | type Directory implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
7643 | id: ID! # internal_id
7644 | standard_id: String!
7645 | entity_type: String!
7646 | parent_types: [String]!
7647 | # StixObject
7648 | representative: Representative!
7649 | x_opencti_stix_ids: [StixId]
7650 | is_inferred: Boolean!
7651 | spec_version: String!
7652 | created_at: DateTime!
7653 | updated_at: DateTime!
7654 | draftVersion: DraftVersion
7655 | # inferences
7656 | x_opencti_inferences: [Inference]
7657 | # StixCoreObject
7658 | createdBy: Identity
7659 | numberOfConnectedElement: Int!
7660 | objectMarking: [MarkingDefinition!]
7661 | objectOrganization: [Organization!]
7662 | objectLabel: [Label!]
7663 | externalReferences(first: Int): ExternalReferenceConnection
7664 | containersNumber: Number
7665 | containers(first: Int, entityTypes: [String!]): ContainerConnection
7666 | reports(first: Int): ReportConnection
7667 | notes(first: Int): NoteConnection
7668 | opinions(first: Int): OpinionConnection
7669 | observedData(first: Int): ObservedDataConnection
7670 | groupings(first: Int): GroupingConnection
7671 | cases(first: Int): CaseConnection
7672 | stixCoreRelationships(
7673 | first: Int
7674 | after: ID
7675 | orderBy: StixCoreRelationshipsOrdering
7676 | orderMode: OrderingMode
7677 | fromId: StixRef
7678 | toId: StixRef
7679 | fromTypes: [String]
7680 | toTypes: [String]
7681 | relationship_type: String
7682 | startTimeStart: DateTime
7683 | startTimeStop: DateTime
7684 | stopTimeStart: DateTime
7685 | stopTimeStop: DateTime
7686 | firstSeenStart: DateTime
7687 | firstSeenStop: DateTime
7688 | lastSeenStart: DateTime
7689 | lastSeenStop: DateTime
7690 | confidences: [Int]
7691 | search: String
7692 | filters: FilterGroup
7693 | ): StixCoreRelationshipConnection
7694 | stixCoreObjectsDistribution(
7695 | relationship_type: [String]
7696 | toTypes: [String]
7697 | field: String!
7698 | startDate: DateTime
7699 | endDate: DateTime
7700 | dateAttribute: String
7701 | operation: StatsOperation!
7702 | limit: Int
7703 | order: String
7704 | types: [String]
7705 | filters: FilterGroup
7706 | search: String
7707 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7708 | stixCoreRelationshipsDistribution(
7709 | field: String!
7710 | operation: StatsOperation!
7711 | startDate: DateTime
7712 | endDate: DateTime
7713 | dateAttribute: String
7714 | isTo: Boolean
7715 | limit: Int
7716 | order: String
7717 | elementWithTargetTypes: [String]
7718 | fromId: [String]
7719 | fromRole: String
7720 | fromTypes: [String]
7721 | toId: [String]
7722 | toRole: String
7723 | toTypes: [String]
7724 | relationship_type: [String]
7725 | confidences: [Int]
7726 | search: String
7727 | filters: FilterGroup
7728 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7729 | opinions_metrics: OpinionsMetrics
7730 | # StixCyberObservable
7731 | x_opencti_score: Int
7732 | x_opencti_description: String
7733 | observable_value: String!
7734 | indicators(first: Int): IndicatorConnection
7735 | # Directory
7736 | path: String!
7737 | path_enc: String
7738 | ctime: DateTime
7739 | mtime: DateTime
7740 | atime: DateTime
7741 | # Technical
7742 | creators: [Creator!]
7743 | toStix: String
7744 | importFiles(
7745 | first: Int
7746 | prefixMimeType: String
7747 | after: ID
7748 | orderBy: FileOrdering
7749 | orderMode: OrderingMode
7750 | search: String
7751 | filters: FilterGroup
7752 | ): FileConnection
7753 | pendingFiles(
7754 | first: Int
7755 | after: ID
7756 | orderBy: FileOrdering
7757 | orderMode: OrderingMode
7758 | search: String
7759 | filters: FilterGroup
7760 | ): FileConnection
7761 | exportFiles(first: Int): FileConnection
7762 | editContext: [EditUserContext!]
7763 | connectors(onlyAlive: Boolean): [Connector]
7764 | jobs(first: Int): [Work]
7765 | }
7766 | input DirectoryAddInput {
7767 | path: String!
7768 | path_enc: String
7769 | ctime: DateTime
7770 | mtime: DateTime
7771 | atime: DateTime
7772 | file: Upload
7773 | }
7774 | type DomainName implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
7775 | id: ID! # internal_id
7776 | standard_id: String!
7777 | entity_type: String!
7778 | parent_types: [String]!
7779 | # StixObject
7780 | representative: Representative!
7781 | x_opencti_stix_ids: [StixId]
7782 | is_inferred: Boolean!
7783 | spec_version: String!
7784 | created_at: DateTime!
7785 | updated_at: DateTime!
7786 | draftVersion: DraftVersion
7787 | # inferences
7788 | x_opencti_inferences: [Inference]
7789 | # StixCoreObject
7790 | createdBy: Identity
7791 | numberOfConnectedElement: Int!
7792 | objectMarking: [MarkingDefinition!]
7793 | objectOrganization: [Organization!]
7794 | objectLabel: [Label!]
7795 | externalReferences(first: Int): ExternalReferenceConnection
7796 | containersNumber: Number
7797 | containers(first: Int, entityTypes: [String!]): ContainerConnection
7798 | reports(first: Int): ReportConnection
7799 | notes(first: Int): NoteConnection
7800 | opinions(first: Int): OpinionConnection
7801 | observedData(first: Int): ObservedDataConnection
7802 | groupings(first: Int): GroupingConnection
7803 | cases(first: Int): CaseConnection
7804 | stixCoreRelationships(
7805 | first: Int
7806 | after: ID
7807 | orderBy: StixCoreRelationshipsOrdering
7808 | orderMode: OrderingMode
7809 | fromId: StixRef
7810 | toId: StixRef
7811 | fromTypes: [String]
7812 | toTypes: [String]
7813 | relationship_type: String
7814 | startTimeStart: DateTime
7815 | startTimeStop: DateTime
7816 | stopTimeStart: DateTime
7817 | stopTimeStop: DateTime
7818 | firstSeenStart: DateTime
7819 | firstSeenStop: DateTime
7820 | lastSeenStart: DateTime
7821 | lastSeenStop: DateTime
7822 | confidences: [Int]
7823 | search: String
7824 | filters: FilterGroup
7825 | ): StixCoreRelationshipConnection
7826 | stixCoreObjectsDistribution(
7827 | relationship_type: [String]
7828 | toTypes: [String]
7829 | field: String!
7830 | startDate: DateTime
7831 | endDate: DateTime
7832 | dateAttribute: String
7833 | operation: StatsOperation!
7834 | limit: Int
7835 | order: String
7836 | types: [String]
7837 | filters: FilterGroup
7838 | search: String
7839 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7840 | stixCoreRelationshipsDistribution(
7841 | field: String!
7842 | operation: StatsOperation!
7843 | startDate: DateTime
7844 | endDate: DateTime
7845 | dateAttribute: String
7846 | isTo: Boolean
7847 | limit: Int
7848 | order: String
7849 | elementWithTargetTypes: [String]
7850 | fromId: [String]
7851 | fromRole: String
7852 | fromTypes: [String]
7853 | toId: [String]
7854 | toRole: String
7855 | toTypes: [String]
7856 | relationship_type: [String]
7857 | confidences: [Int]
7858 | search: String
7859 | filters: FilterGroup
7860 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7861 | opinions_metrics: OpinionsMetrics
7862 | # StixCyberObservable
7863 | observable_value: String!
7864 | x_opencti_score: Int
7865 | x_opencti_description: String
7866 | indicators(first: Int): IndicatorConnection
7867 | # DomainName
7868 | value: String
7869 | # Technical
7870 | creators: [Creator!]
7871 | toStix: String
7872 | importFiles(
7873 | first: Int
7874 | prefixMimeType: String
7875 | after: ID
7876 | orderBy: FileOrdering
7877 | orderMode: OrderingMode
7878 | search: String
7879 | filters: FilterGroup
7880 | ): FileConnection
7881 | pendingFiles(
7882 | first: Int
7883 | after: ID
7884 | orderBy: FileOrdering
7885 | orderMode: OrderingMode
7886 | search: String
7887 | filters: FilterGroup
7888 | ): FileConnection
7889 | exportFiles(first: Int): FileConnection
7890 | editContext: [EditUserContext!]
7891 | connectors(onlyAlive: Boolean): [Connector]
7892 | jobs(first: Int): [Work]
7893 | }
7894 | input DomainNameAddInput {
7895 | value: String!
7896 | file: Upload
7897 | }
7898 | type EmailAddr implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
7899 | id: ID! # internal_id
7900 | standard_id: String!
7901 | entity_type: String!
7902 | parent_types: [String]!
7903 | # StixObject
7904 | representative: Representative!
7905 | x_opencti_stix_ids: [StixId]
7906 | is_inferred: Boolean!
7907 | spec_version: String!
7908 | created_at: DateTime!
7909 | updated_at: DateTime!
7910 | draftVersion: DraftVersion
7911 | # inferences
7912 | x_opencti_inferences: [Inference]
7913 | # StixCoreObject
7914 | createdBy: Identity
7915 | numberOfConnectedElement: Int!
7916 | objectMarking: [MarkingDefinition!]
7917 | objectOrganization: [Organization!]
7918 | objectLabel: [Label!]
7919 | externalReferences(first: Int): ExternalReferenceConnection
7920 | containersNumber: Number
7921 | containers(first: Int, entityTypes: [String!]): ContainerConnection
7922 | reports(first: Int): ReportConnection
7923 | notes(first: Int): NoteConnection
7924 | opinions(first: Int): OpinionConnection
7925 | observedData(first: Int): ObservedDataConnection
7926 | groupings(first: Int): GroupingConnection
7927 | cases(first: Int): CaseConnection
7928 | stixCoreRelationships(
7929 | first: Int
7930 | after: ID
7931 | orderBy: StixCoreRelationshipsOrdering
7932 | orderMode: OrderingMode
7933 | fromId: StixRef
7934 | toId: StixRef
7935 | fromTypes: [String]
7936 | toTypes: [String]
7937 | relationship_type: String
7938 | startTimeStart: DateTime
7939 | startTimeStop: DateTime
7940 | stopTimeStart: DateTime
7941 | stopTimeStop: DateTime
7942 | firstSeenStart: DateTime
7943 | firstSeenStop: DateTime
7944 | lastSeenStart: DateTime
7945 | lastSeenStop: DateTime
7946 | confidences: [Int]
7947 | search: String
7948 | filters: FilterGroup
7949 | ): StixCoreRelationshipConnection
7950 | stixCoreObjectsDistribution(
7951 | relationship_type: [String]
7952 | toTypes: [String]
7953 | field: String!
7954 | startDate: DateTime
7955 | endDate: DateTime
7956 | dateAttribute: String
7957 | operation: StatsOperation!
7958 | limit: Int
7959 | order: String
7960 | types: [String]
7961 | filters: FilterGroup
7962 | search: String
7963 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7964 | stixCoreRelationshipsDistribution(
7965 | field: String!
7966 | operation: StatsOperation!
7967 | startDate: DateTime
7968 | endDate: DateTime
7969 | dateAttribute: String
7970 | isTo: Boolean
7971 | limit: Int
7972 | order: String
7973 | elementWithTargetTypes: [String]
7974 | fromId: [String]
7975 | fromRole: String
7976 | fromTypes: [String]
7977 | toId: [String]
7978 | toRole: String
7979 | toTypes: [String]
7980 | relationship_type: [String]
7981 | confidences: [Int]
7982 | search: String
7983 | filters: FilterGroup
7984 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
7985 | opinions_metrics: OpinionsMetrics
7986 | # StixCyberObservable
7987 | x_opencti_score: Int
7988 | x_opencti_description: String
7989 | observable_value: String!
7990 | indicators(first: Int): IndicatorConnection
7991 | # EmailAddr
7992 | value: String
7993 | display_name: String
7994 | # Technical
7995 | creators: [Creator!]
7996 | toStix: String
7997 | importFiles(
7998 | first: Int
7999 | prefixMimeType: String
8000 | after: ID
8001 | orderBy: FileOrdering
8002 | orderMode: OrderingMode
8003 | search: String
8004 | filters: FilterGroup
8005 | ): FileConnection
8006 | pendingFiles(
8007 | first: Int
8008 | after: ID
8009 | orderBy: FileOrdering
8010 | orderMode: OrderingMode
8011 | search: String
8012 | filters: FilterGroup
8013 | ): FileConnection
8014 | exportFiles(first: Int): FileConnection
8015 | editContext: [EditUserContext!]
8016 | connectors(onlyAlive: Boolean): [Connector]
8017 | jobs(first: Int): [Work]
8018 | }
8019 | input EmailAddrAddInput {
8020 | value: String
8021 | display_name: String
8022 | file: Upload
8023 | }
8024 | type EmailMessage implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
8025 | id: ID! # internal_id
8026 | standard_id: String!
8027 | entity_type: String!
8028 | parent_types: [String]!
8029 | # StixObject
8030 | representative: Representative!
8031 | x_opencti_stix_ids: [StixId]
8032 | is_inferred: Boolean!
8033 | spec_version: String!
8034 | created_at: DateTime!
8035 | updated_at: DateTime!
8036 | draftVersion: DraftVersion
8037 | # inferences
8038 | x_opencti_inferences: [Inference]
8039 | # StixCoreObject
8040 | createdBy: Identity
8041 | numberOfConnectedElement: Int!
8042 | objectMarking: [MarkingDefinition!]
8043 | objectOrganization: [Organization!]
8044 | objectLabel: [Label!]
8045 | externalReferences(first: Int): ExternalReferenceConnection
8046 | containersNumber: Number
8047 | containers(first: Int, entityTypes: [String!]): ContainerConnection
8048 | reports(first: Int): ReportConnection
8049 | notes(first: Int): NoteConnection
8050 | opinions(first: Int): OpinionConnection
8051 | observedData(first: Int): ObservedDataConnection
8052 | groupings(first: Int): GroupingConnection
8053 | cases(first: Int): CaseConnection
8054 | stixCoreRelationships(
8055 | first: Int
8056 | after: ID
8057 | orderBy: StixCoreRelationshipsOrdering
8058 | orderMode: OrderingMode
8059 | fromId: StixRef
8060 | toId: StixRef
8061 | fromTypes: [String]
8062 | toTypes: [String]
8063 | relationship_type: String
8064 | startTimeStart: DateTime
8065 | startTimeStop: DateTime
8066 | stopTimeStart: DateTime
8067 | stopTimeStop: DateTime
8068 | firstSeenStart: DateTime
8069 | firstSeenStop: DateTime
8070 | lastSeenStart: DateTime
8071 | lastSeenStop: DateTime
8072 | confidences: [Int]
8073 | search: String
8074 | filters: FilterGroup
8075 | ): StixCoreRelationshipConnection
8076 | stixCoreObjectsDistribution(
8077 | relationship_type: [String]
8078 | toTypes: [String]
8079 | field: String!
8080 | startDate: DateTime
8081 | endDate: DateTime
8082 | dateAttribute: String
8083 | operation: StatsOperation!
8084 | limit: Int
8085 | order: String
8086 | types: [String]
8087 | filters: FilterGroup
8088 | search: String
8089 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8090 | stixCoreRelationshipsDistribution(
8091 | field: String!
8092 | operation: StatsOperation!
8093 | startDate: DateTime
8094 | endDate: DateTime
8095 | dateAttribute: String
8096 | isTo: Boolean
8097 | limit: Int
8098 | order: String
8099 | elementWithTargetTypes: [String]
8100 | fromId: [String]
8101 | fromRole: String
8102 | fromTypes: [String]
8103 | toId: [String]
8104 | toRole: String
8105 | toTypes: [String]
8106 | relationship_type: [String]
8107 | confidences: [Int]
8108 | search: String
8109 | filters: FilterGroup
8110 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8111 | opinions_metrics: OpinionsMetrics
8112 | # StixCyberObservable
8113 | x_opencti_score: Int
8114 | x_opencti_description: String
8115 | observable_value: String!
8116 | indicators(first: Int): IndicatorConnection
8117 | # EmailMessage
8118 | is_multipart: Boolean
8119 | attribute_date: DateTime
8120 | content_type: String
8121 | message_id: String
8122 | subject: String
8123 | received_lines: [String]
8124 | body: String
8125 | # Technical
8126 | creators: [Creator!]
8127 | toStix: String
8128 | importFiles(
8129 | first: Int
8130 | prefixMimeType: String
8131 | after: ID
8132 | orderBy: FileOrdering
8133 | orderMode: OrderingMode
8134 | search: String
8135 | filters: FilterGroup
8136 | ): FileConnection
8137 | pendingFiles(
8138 | first: Int
8139 | after: ID
8140 | orderBy: FileOrdering
8141 | orderMode: OrderingMode
8142 | search: String
8143 | filters: FilterGroup
8144 | ): FileConnection
8145 | exportFiles(first: Int): FileConnection
8146 | editContext: [EditUserContext!]
8147 | connectors(onlyAlive: Boolean): [Connector]
8148 | jobs(first: Int): [Work]
8149 | }
8150 | input EmailMessageAddInput {
8151 | is_multipart: Boolean
8152 | attribute_date: DateTime
8153 | content_type: String
8154 | message_id: String
8155 | subject: String
8156 | received_lines: [String]
8157 | body: String
8158 | file: Upload
8159 | }
8160 | type EmailMimePartType implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
8161 | id: ID! # internal_id
8162 | standard_id: String!
8163 | entity_type: String!
8164 | parent_types: [String]!
8165 | # StixObject
8166 | representative: Representative!
8167 | x_opencti_stix_ids: [StixId]
8168 | is_inferred: Boolean!
8169 | spec_version: String!
8170 | created_at: DateTime!
8171 | updated_at: DateTime!
8172 | draftVersion: DraftVersion
8173 | # inferences
8174 | x_opencti_inferences: [Inference]
8175 | # StixCoreObject
8176 | createdBy: Identity
8177 | numberOfConnectedElement: Int!
8178 | objectMarking: [MarkingDefinition!]
8179 | objectOrganization: [Organization!]
8180 | objectLabel: [Label!]
8181 | externalReferences(first: Int): ExternalReferenceConnection
8182 | containersNumber: Number
8183 | containers(first: Int, entityTypes: [String!]): ContainerConnection
8184 | reports(first: Int): ReportConnection
8185 | notes(first: Int): NoteConnection
8186 | opinions(first: Int): OpinionConnection
8187 | observedData(first: Int): ObservedDataConnection
8188 | groupings(first: Int): GroupingConnection
8189 | cases(first: Int): CaseConnection
8190 | stixCoreRelationships(
8191 | first: Int
8192 | after: ID
8193 | orderBy: StixCoreRelationshipsOrdering
8194 | orderMode: OrderingMode
8195 | fromId: StixRef
8196 | toId: StixRef
8197 | fromTypes: [String]
8198 | toTypes: [String]
8199 | relationship_type: String
8200 | startTimeStart: DateTime
8201 | startTimeStop: DateTime
8202 | stopTimeStart: DateTime
8203 | stopTimeStop: DateTime
8204 | firstSeenStart: DateTime
8205 | firstSeenStop: DateTime
8206 | lastSeenStart: DateTime
8207 | lastSeenStop: DateTime
8208 | confidences: [Int]
8209 | search: String
8210 | filters: FilterGroup
8211 | ): StixCoreRelationshipConnection
8212 | stixCoreObjectsDistribution(
8213 | relationship_type: [String]
8214 | toTypes: [String]
8215 | field: String!
8216 | startDate: DateTime
8217 | endDate: DateTime
8218 | dateAttribute: String
8219 | operation: StatsOperation!
8220 | limit: Int
8221 | order: String
8222 | types: [String]
8223 | filters: FilterGroup
8224 | search: String
8225 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8226 | stixCoreRelationshipsDistribution(
8227 | field: String!
8228 | operation: StatsOperation!
8229 | startDate: DateTime
8230 | endDate: DateTime
8231 | dateAttribute: String
8232 | isTo: Boolean
8233 | limit: Int
8234 | order: String
8235 | elementWithTargetTypes: [String]
8236 | fromId: [String]
8237 | fromRole: String
8238 | fromTypes: [String]
8239 | toId: [String]
8240 | toRole: String
8241 | toTypes: [String]
8242 | relationship_type: [String]
8243 | confidences: [Int]
8244 | search: String
8245 | filters: FilterGroup
8246 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8247 | opinions_metrics: OpinionsMetrics
8248 | # StixCyberObservable
8249 | x_opencti_score: Int
8250 | x_opencti_description: String
8251 | observable_value: String!
8252 | indicators(first: Int): IndicatorConnection
8253 | # EmailMimePartType
8254 | body: String
8255 | content_type: String
8256 | content_disposition: String
8257 | # Technical
8258 | creators: [Creator!]
8259 | toStix: String
8260 | importFiles(
8261 | first: Int
8262 | prefixMimeType: String
8263 | after: ID
8264 | orderBy: FileOrdering
8265 | orderMode: OrderingMode
8266 | search: String
8267 | filters: FilterGroup
8268 | ): FileConnection
8269 | pendingFiles(
8270 | first: Int
8271 | after: ID
8272 | orderBy: FileOrdering
8273 | orderMode: OrderingMode
8274 | search: String
8275 | filters: FilterGroup
8276 | ): FileConnection
8277 | exportFiles(first: Int): FileConnection
8278 | editContext: [EditUserContext!]
8279 | connectors(onlyAlive: Boolean): [Connector]
8280 | jobs(first: Int): [Work]
8281 | }
8282 | input EmailMimePartTypeAddInput {
8283 | body: String
8284 | content_type: String
8285 | content_disposition: String
8286 | file: Upload
8287 | }
8288 | ############## HashedObservable
8289 | input HashInput {
8290 | algorithm: String! @constraint(minLength: 3)
8291 | hash: String! @constraint(minLength: 5)
8292 | }
8293 | type Hash {
8294 | algorithm: String!
8295 | hash: String
8296 | }
8297 | type StixFileEdge {
8298 | cursor: String!
8299 | node: StixFile!
8300 | }
8301 | type StixFileConnection {
8302 | pageInfo: PageInfo!
8303 | edges: [StixFileEdge]
8304 | }
8305 |
8306 | interface HashedObservable {
8307 | id: ID! # internal_id
8308 | standard_id: String!
8309 | entity_type: String!
8310 | parent_types: [String]!
8311 | # StixObject
8312 | representative: Representative!
8313 | x_opencti_stix_ids: [StixId]
8314 | is_inferred: Boolean!
8315 | spec_version: String!
8316 | created_at: DateTime!
8317 | updated_at: DateTime!
8318 | draftVersion: DraftVersion
8319 | # StixCoreObject
8320 | createdBy: Identity
8321 | numberOfConnectedElement: Int!
8322 | objectMarking: [MarkingDefinition!]
8323 | objectOrganization: [Organization!]
8324 | objectLabel: [Label!]
8325 | externalReferences(first: Int): ExternalReferenceConnection
8326 | containersNumber: Number
8327 | containers(first: Int, entityTypes: [String!]): ContainerConnection
8328 | reports(first: Int): ReportConnection
8329 | notes(first: Int): NoteConnection
8330 | opinions(first: Int): OpinionConnection
8331 | observedData(first: Int): ObservedDataConnection
8332 | groupings(first: Int): GroupingConnection
8333 | cases(first: Int): CaseConnection
8334 | stixCoreRelationships(
8335 | first: Int
8336 | after: ID
8337 | orderBy: StixCoreRelationshipsOrdering
8338 | orderMode: OrderingMode
8339 | fromId: StixRef
8340 | toId: StixRef
8341 | fromTypes: [String]
8342 | toTypes: [String]
8343 | relationship_type: String
8344 | startTimeStart: DateTime
8345 | startTimeStop: DateTime
8346 | stopTimeStart: DateTime
8347 | stopTimeStop: DateTime
8348 | firstSeenStart: DateTime
8349 | firstSeenStop: DateTime
8350 | lastSeenStart: DateTime
8351 | lastSeenStop: DateTime
8352 | confidences: [Int]
8353 | search: String
8354 | filters: FilterGroup
8355 | ): StixCoreRelationshipConnection
8356 | stixCoreObjectsDistribution(
8357 | relationship_type: [String]
8358 | toTypes: [String]
8359 | field: String!
8360 | startDate: DateTime
8361 | endDate: DateTime
8362 | dateAttribute: String
8363 | operation: StatsOperation!
8364 | limit: Int
8365 | order: String
8366 | types: [String]
8367 | filters: FilterGroup
8368 | search: String
8369 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8370 | stixCoreRelationshipsDistribution(
8371 | field: String!
8372 | operation: StatsOperation!
8373 | startDate: DateTime
8374 | endDate: DateTime
8375 | dateAttribute: String
8376 | isTo: Boolean
8377 | limit: Int
8378 | order: String
8379 | elementWithTargetTypes: [String]
8380 | fromId: [String]
8381 | fromRole: String
8382 | fromTypes: [String]
8383 | toId: [String]
8384 | toRole: String
8385 | toTypes: [String]
8386 | relationship_type: [String]
8387 | confidences: [Int]
8388 | search: String
8389 | filters: FilterGroup
8390 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8391 | opinions_metrics: OpinionsMetrics
8392 | # StixCyberObservable
8393 | x_opencti_score: Int
8394 | x_opencti_description: String
8395 | observable_value: String!
8396 | indicators(first: Int): IndicatorConnection
8397 | # HashedObservable
8398 | hashes: [Hash]
8399 | # Technical
8400 | creators: [Creator!]
8401 | toStix: String
8402 | importFiles(
8403 | first: Int
8404 | prefixMimeType: String
8405 | after: ID
8406 | orderBy: FileOrdering
8407 | orderMode: OrderingMode
8408 | search: String
8409 | filters: FilterGroup
8410 | ): FileConnection
8411 | pendingFiles(
8412 | first: Int
8413 | after: ID
8414 | orderBy: FileOrdering
8415 | orderMode: OrderingMode
8416 | search: String
8417 | filters: FilterGroup
8418 | ): FileConnection
8419 | exportFiles(first: Int): FileConnection
8420 | editContext: [EditUserContext!]
8421 | connectors(onlyAlive: Boolean): [Connector]
8422 | jobs(first: Int): [Work]
8423 | }
8424 | type Artifact implements BasicObject & StixObject & StixCoreObject & StixCyberObservable & HashedObservable {
8425 | id: ID! # internal_id
8426 | standard_id: String!
8427 | entity_type: String!
8428 | parent_types: [String]!
8429 | # StixObject
8430 | representative: Representative!
8431 | x_opencti_stix_ids: [StixId]
8432 | is_inferred: Boolean!
8433 | spec_version: String!
8434 | created_at: DateTime!
8435 | updated_at: DateTime!
8436 | draftVersion: DraftVersion
8437 | # inferences
8438 | x_opencti_inferences: [Inference]
8439 | # StixCoreObject
8440 | createdBy: Identity
8441 | numberOfConnectedElement: Int!
8442 | objectMarking: [MarkingDefinition!]
8443 | objectOrganization: [Organization!]
8444 | objectLabel: [Label!]
8445 | externalReferences(first: Int): ExternalReferenceConnection
8446 | containersNumber: Number
8447 | containers(first: Int, entityTypes: [String!]): ContainerConnection
8448 | reports(first: Int): ReportConnection
8449 | notes(first: Int): NoteConnection
8450 | opinions(first: Int): OpinionConnection
8451 | observedData(first: Int): ObservedDataConnection
8452 | groupings(first: Int): GroupingConnection
8453 | cases(first: Int): CaseConnection
8454 | stixCoreRelationships(
8455 | first: Int
8456 | after: ID
8457 | orderBy: StixCoreRelationshipsOrdering
8458 | orderMode: OrderingMode
8459 | fromId: StixRef
8460 | toId: StixRef
8461 | fromTypes: [String]
8462 | toTypes: [String]
8463 | relationship_type: String
8464 | startTimeStart: DateTime
8465 | startTimeStop: DateTime
8466 | stopTimeStart: DateTime
8467 | stopTimeStop: DateTime
8468 | firstSeenStart: DateTime
8469 | firstSeenStop: DateTime
8470 | lastSeenStart: DateTime
8471 | lastSeenStop: DateTime
8472 | confidences: [Int]
8473 | search: String
8474 | filters: FilterGroup
8475 | ): StixCoreRelationshipConnection
8476 | stixCoreObjectsDistribution(
8477 | relationship_type: [String]
8478 | toTypes: [String]
8479 | field: String!
8480 | startDate: DateTime
8481 | endDate: DateTime
8482 | dateAttribute: String
8483 | operation: StatsOperation!
8484 | limit: Int
8485 | order: String
8486 | types: [String]
8487 | filters: FilterGroup
8488 | search: String
8489 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8490 | stixCoreRelationshipsDistribution(
8491 | field: String!
8492 | operation: StatsOperation!
8493 | startDate: DateTime
8494 | endDate: DateTime
8495 | dateAttribute: String
8496 | isTo: Boolean
8497 | limit: Int
8498 | order: String
8499 | elementWithTargetTypes: [String]
8500 | fromId: [String]
8501 | fromRole: String
8502 | fromTypes: [String]
8503 | toId: [String]
8504 | toRole: String
8505 | toTypes: [String]
8506 | relationship_type: [String]
8507 | confidences: [Int]
8508 | search: String
8509 | filters: FilterGroup
8510 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8511 | opinions_metrics: OpinionsMetrics
8512 | # StixCyberObservable
8513 | x_opencti_score: Int
8514 | x_opencti_description: String
8515 | observable_value: String!
8516 | indicators(first: Int): IndicatorConnection
8517 | # HashedObservable
8518 | hashes: [Hash]
8519 | # Artifact
8520 | mime_type: String
8521 | payload_bin: String
8522 | url: String
8523 | encryption_algorithm: String
8524 | decryption_key: String
8525 | x_opencti_additional_names: [String]
8526 | # Technical
8527 | creators: [Creator!]
8528 | toStix: String
8529 | importFiles(
8530 | first: Int
8531 | prefixMimeType: String
8532 | after: ID
8533 | orderBy: FileOrdering
8534 | orderMode: OrderingMode
8535 | search: String
8536 | filters: FilterGroup
8537 | ): FileConnection
8538 | pendingFiles(
8539 | first: Int
8540 | after: ID
8541 | orderBy: FileOrdering
8542 | orderMode: OrderingMode
8543 | search: String
8544 | filters: FilterGroup
8545 | ): FileConnection
8546 | exportFiles(first: Int): FileConnection
8547 | editContext: [EditUserContext!]
8548 | connectors(onlyAlive: Boolean): [Connector]
8549 | jobs(first: Int): [Work]
8550 | }
8551 | input ArtifactAddInput {
8552 | hashes: [HashInput]
8553 | mime_type: String
8554 | payload_bin: String
8555 | url: String
8556 | encryption_algorithm: String
8557 | decryption_key: String
8558 | x_opencti_additional_names: [String]
8559 | file: Upload
8560 | }
8561 | type StixFile implements BasicObject & StixObject & StixCoreObject & StixCyberObservable & HashedObservable {
8562 | id: ID! # internal_id
8563 | standard_id: String!
8564 | entity_type: String!
8565 | parent_types: [String]!
8566 | # StixObject
8567 | representative: Representative!
8568 | x_opencti_stix_ids: [StixId]
8569 | is_inferred: Boolean!
8570 | spec_version: String!
8571 | created_at: DateTime!
8572 | updated_at: DateTime!
8573 | draftVersion: DraftVersion
8574 | # inferences
8575 | x_opencti_inferences: [Inference]
8576 | # StixCoreObject
8577 | createdBy: Identity
8578 | numberOfConnectedElement: Int!
8579 | objectMarking: [MarkingDefinition!]
8580 | objectOrganization: [Organization!]
8581 | objectLabel: [Label!]
8582 | externalReferences(first: Int): ExternalReferenceConnection
8583 | containersNumber: Number
8584 | containers(first: Int, entityTypes: [String!]): ContainerConnection
8585 | reports(first: Int): ReportConnection
8586 | notes(first: Int): NoteConnection
8587 | opinions(first: Int): OpinionConnection
8588 | observedData(first: Int): ObservedDataConnection
8589 | groupings(first: Int): GroupingConnection
8590 | cases(first: Int): CaseConnection
8591 | stixCoreRelationships(
8592 | first: Int
8593 | after: ID
8594 | orderBy: StixCoreRelationshipsOrdering
8595 | orderMode: OrderingMode
8596 | fromId: StixRef
8597 | toId: StixRef
8598 | fromTypes: [String]
8599 | toTypes: [String]
8600 | relationship_type: String
8601 | startTimeStart: DateTime
8602 | startTimeStop: DateTime
8603 | stopTimeStart: DateTime
8604 | stopTimeStop: DateTime
8605 | firstSeenStart: DateTime
8606 | firstSeenStop: DateTime
8607 | lastSeenStart: DateTime
8608 | lastSeenStop: DateTime
8609 | confidences: [Int]
8610 | search: String
8611 | filters: FilterGroup
8612 | ): StixCoreRelationshipConnection
8613 | stixCoreObjectsDistribution(
8614 | relationship_type: [String]
8615 | toTypes: [String]
8616 | field: String!
8617 | startDate: DateTime
8618 | endDate: DateTime
8619 | dateAttribute: String
8620 | operation: StatsOperation!
8621 | limit: Int
8622 | order: String
8623 | types: [String]
8624 | filters: FilterGroup
8625 | search: String
8626 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8627 | stixCoreRelationshipsDistribution(
8628 | field: String!
8629 | operation: StatsOperation!
8630 | startDate: DateTime
8631 | endDate: DateTime
8632 | dateAttribute: String
8633 | isTo: Boolean
8634 | limit: Int
8635 | order: String
8636 | elementWithTargetTypes: [String]
8637 | fromId: [String]
8638 | fromRole: String
8639 | fromTypes: [String]
8640 | toId: [String]
8641 | toRole: String
8642 | toTypes: [String]
8643 | relationship_type: [String]
8644 | confidences: [Int]
8645 | search: String
8646 | filters: FilterGroup
8647 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8648 | opinions_metrics: OpinionsMetrics
8649 | # StixCyberObservable
8650 | x_opencti_score: Int
8651 | x_opencti_description: String
8652 | observable_value: String!
8653 | indicators(first: Int): IndicatorConnection
8654 | # HashedObservable
8655 | hashes: [Hash]
8656 | # File
8657 | extensions: String
8658 | size: Int
8659 | name: String
8660 | name_enc: String
8661 | magic_number_hex: String
8662 | mime_type: String
8663 | ctime: DateTime
8664 | mtime: DateTime
8665 | atime: DateTime
8666 | x_opencti_additional_names: [String]
8667 | obsContent: Artifact
8668 | # Technical
8669 | creators: [Creator!]
8670 | toStix: String
8671 | importFiles(
8672 | first: Int
8673 | prefixMimeType: String
8674 | after: ID
8675 | orderBy: FileOrdering
8676 | orderMode: OrderingMode
8677 | search: String
8678 | filters: FilterGroup
8679 | ): FileConnection
8680 | pendingFiles(
8681 | first: Int
8682 | after: ID
8683 | orderBy: FileOrdering
8684 | orderMode: OrderingMode
8685 | search: String
8686 | filters: FilterGroup
8687 | ): FileConnection
8688 | exportFiles(first: Int): FileConnection
8689 | editContext: [EditUserContext!]
8690 | connectors(onlyAlive: Boolean): [Connector]
8691 | jobs(first: Int): [Work]
8692 | }
8693 | input StixFileAddInput {
8694 | hashes: [HashInput]
8695 | size: Int
8696 | name: String
8697 | name_enc: String
8698 | magic_number_hex: String
8699 | mime_type: String
8700 | ctime: DateTime
8701 | mtime: DateTime
8702 | atime: DateTime
8703 | x_opencti_additional_names: [String]
8704 | obsContent: ID
8705 | file: Upload
8706 | }
8707 | type X509Certificate implements BasicObject & StixObject & StixCoreObject & StixCyberObservable & HashedObservable {
8708 | id: ID! # internal_id
8709 | standard_id: String!
8710 | entity_type: String!
8711 | parent_types: [String]!
8712 | # StixObject
8713 | representative: Representative!
8714 | x_opencti_stix_ids: [StixId]
8715 | is_inferred: Boolean!
8716 | spec_version: String!
8717 | created_at: DateTime!
8718 | updated_at: DateTime!
8719 | draftVersion: DraftVersion
8720 | # inferences
8721 | x_opencti_inferences: [Inference]
8722 | # StixCoreObject
8723 | createdBy: Identity
8724 | numberOfConnectedElement: Int!
8725 | objectMarking: [MarkingDefinition!]
8726 | objectOrganization: [Organization!]
8727 | objectLabel: [Label!]
8728 | externalReferences(first: Int): ExternalReferenceConnection
8729 | containersNumber: Number
8730 | containers(first: Int, entityTypes: [String!]): ContainerConnection
8731 | reports(first: Int): ReportConnection
8732 | notes(first: Int): NoteConnection
8733 | opinions(first: Int): OpinionConnection
8734 | observedData(first: Int): ObservedDataConnection
8735 | groupings(first: Int): GroupingConnection
8736 | cases(first: Int): CaseConnection
8737 | stixCoreRelationships(
8738 | first: Int
8739 | after: ID
8740 | orderBy: StixCoreRelationshipsOrdering
8741 | orderMode: OrderingMode
8742 | fromId: StixRef
8743 | toId: StixRef
8744 | fromTypes: [String]
8745 | toTypes: [String]
8746 | relationship_type: String
8747 | startTimeStart: DateTime
8748 | startTimeStop: DateTime
8749 | stopTimeStart: DateTime
8750 | stopTimeStop: DateTime
8751 | firstSeenStart: DateTime
8752 | firstSeenStop: DateTime
8753 | lastSeenStart: DateTime
8754 | lastSeenStop: DateTime
8755 | confidences: [Int]
8756 | search: String
8757 | filters: FilterGroup
8758 | ): StixCoreRelationshipConnection
8759 | stixCoreObjectsDistribution(
8760 | relationship_type: [String]
8761 | toTypes: [String]
8762 | field: String!
8763 | startDate: DateTime
8764 | endDate: DateTime
8765 | dateAttribute: String
8766 | operation: StatsOperation!
8767 | limit: Int
8768 | order: String
8769 | types: [String]
8770 | filters: FilterGroup
8771 | search: String
8772 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8773 | stixCoreRelationshipsDistribution(
8774 | field: String!
8775 | operation: StatsOperation!
8776 | startDate: DateTime
8777 | endDate: DateTime
8778 | dateAttribute: String
8779 | isTo: Boolean
8780 | limit: Int
8781 | order: String
8782 | elementWithTargetTypes: [String]
8783 | fromId: [String]
8784 | fromRole: String
8785 | fromTypes: [String]
8786 | toId: [String]
8787 | toRole: String
8788 | toTypes: [String]
8789 | relationship_type: [String]
8790 | confidences: [Int]
8791 | search: String
8792 | filters: FilterGroup
8793 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8794 | opinions_metrics: OpinionsMetrics
8795 | # StixCyberObservable
8796 | x_opencti_score: Int
8797 | x_opencti_description: String
8798 | observable_value: String!
8799 | indicators(first: Int): IndicatorConnection
8800 | # HashedObservable
8801 | hashes: [Hash]
8802 | # X509Certificate
8803 | is_self_signed: Boolean
8804 | version: String
8805 | serial_number: String
8806 | signature_algorithm: String
8807 | issuer: String
8808 | subject: String
8809 | subject_public_key_algorithm: String
8810 | subject_public_key_modulus: String
8811 | subject_public_key_exponent: Int
8812 | validity_not_before: DateTime
8813 | validity_not_after: DateTime
8814 | # X509V3ExtensionsType
8815 | basic_constraints: String
8816 | name_constraints: String
8817 | policy_constraints: String
8818 | key_usage: String
8819 | extended_key_usage: String
8820 | subject_key_identifier: String
8821 | authority_key_identifier: String
8822 | subject_alternative_name: String
8823 | issuer_alternative_name: String
8824 | subject_directory_attributes: String
8825 | crl_distribution_points: String
8826 | inhibit_any_policy: String
8827 | private_key_usage_period_not_before: DateTime
8828 | private_key_usage_period_not_after: DateTime
8829 | certificate_policies: String
8830 | policy_mappings: String
8831 | # Technical
8832 | creators: [Creator!]
8833 | toStix: String
8834 | importFiles(
8835 | first: Int
8836 | prefixMimeType: String
8837 | after: ID
8838 | orderBy: FileOrdering
8839 | orderMode: OrderingMode
8840 | search: String
8841 | filters: FilterGroup
8842 | ): FileConnection
8843 | pendingFiles(
8844 | first: Int
8845 | after: ID
8846 | orderBy: FileOrdering
8847 | orderMode: OrderingMode
8848 | search: String
8849 | filters: FilterGroup
8850 | ): FileConnection
8851 | exportFiles(first: Int): FileConnection
8852 | editContext: [EditUserContext!]
8853 | connectors(onlyAlive: Boolean): [Connector]
8854 | jobs(first: Int): [Work]
8855 | }
8856 | input X509CertificateAddInput {
8857 | hashes: [HashInput]
8858 | is_self_signed: Boolean
8859 | version: String
8860 | serial_number: String
8861 | signature_algorithm: String
8862 | issuer: String
8863 | subject: String
8864 | subject_public_key_algorithm: String
8865 | subject_public_key_modulus: String
8866 | subject_public_key_exponent: Int
8867 | validity_not_before: DateTime
8868 | validity_not_after: DateTime
8869 | # X509V3ExtensionsType
8870 | basic_constraints: String
8871 | name_constraints: String
8872 | policy_constraints: String
8873 | key_usage: String
8874 | extended_key_usage: String
8875 | subject_key_identifier: String
8876 | authority_key_identifier: String
8877 | subject_alternative_name: String
8878 | issuer_alternative_name: String
8879 | subject_directory_attributes: String
8880 | crl_distribution_points: String
8881 | inhibit_any_policy: String
8882 | private_key_usage_period_not_before: DateTime
8883 | private_key_usage_period_not_after: DateTime
8884 | certificate_policies: String
8885 | policy_mappings: String
8886 | file: Upload
8887 | }
8888 | type IPv4Addr implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
8889 | id: ID! # internal_id
8890 | standard_id: String!
8891 | entity_type: String!
8892 | parent_types: [String]!
8893 | # StixObject
8894 | representative: Representative!
8895 | x_opencti_stix_ids: [StixId]
8896 | is_inferred: Boolean!
8897 | spec_version: String!
8898 | created_at: DateTime!
8899 | updated_at: DateTime!
8900 | draftVersion: DraftVersion
8901 | # inferences
8902 | x_opencti_inferences: [Inference]
8903 | # StixCoreObject
8904 | createdBy: Identity
8905 | numberOfConnectedElement: Int!
8906 | objectMarking: [MarkingDefinition!]
8907 | objectOrganization: [Organization!]
8908 | objectLabel: [Label!]
8909 | externalReferences(first: Int): ExternalReferenceConnection
8910 | containersNumber: Number
8911 | containers(first: Int, entityTypes: [String!]): ContainerConnection
8912 | reports(first: Int): ReportConnection
8913 | notes(first: Int): NoteConnection
8914 | opinions(first: Int): OpinionConnection
8915 | observedData(first: Int): ObservedDataConnection
8916 | groupings(first: Int): GroupingConnection
8917 | cases(first: Int): CaseConnection
8918 | stixCoreRelationships(
8919 | first: Int
8920 | after: ID
8921 | orderBy: StixCoreRelationshipsOrdering
8922 | orderMode: OrderingMode
8923 | fromId: StixRef
8924 | toId: StixRef
8925 | fromTypes: [String]
8926 | toTypes: [String]
8927 | relationship_type: String
8928 | startTimeStart: DateTime
8929 | startTimeStop: DateTime
8930 | stopTimeStart: DateTime
8931 | stopTimeStop: DateTime
8932 | firstSeenStart: DateTime
8933 | firstSeenStop: DateTime
8934 | lastSeenStart: DateTime
8935 | lastSeenStop: DateTime
8936 | confidences: [Int]
8937 | search: String
8938 | filters: FilterGroup
8939 | ): StixCoreRelationshipConnection
8940 | stixCoreObjectsDistribution(
8941 | relationship_type: [String]
8942 | toTypes: [String]
8943 | field: String!
8944 | startDate: DateTime
8945 | endDate: DateTime
8946 | dateAttribute: String
8947 | operation: StatsOperation!
8948 | limit: Int
8949 | order: String
8950 | types: [String]
8951 | filters: FilterGroup
8952 | search: String
8953 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8954 | stixCoreRelationshipsDistribution(
8955 | field: String!
8956 | operation: StatsOperation!
8957 | startDate: DateTime
8958 | endDate: DateTime
8959 | dateAttribute: String
8960 | isTo: Boolean
8961 | limit: Int
8962 | order: String
8963 | elementWithTargetTypes: [String]
8964 | fromId: [String]
8965 | fromRole: String
8966 | fromTypes: [String]
8967 | toId: [String]
8968 | toRole: String
8969 | toTypes: [String]
8970 | relationship_type: [String]
8971 | confidences: [Int]
8972 | search: String
8973 | filters: FilterGroup
8974 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
8975 | opinions_metrics: OpinionsMetrics
8976 | # StixCyberObservable
8977 | x_opencti_score: Int
8978 | x_opencti_description: String
8979 | observable_value: String!
8980 | indicators(first: Int): IndicatorConnection
8981 | # IPv4Addr
8982 | value: String
8983 | countries: CountryConnection
8984 | # Technical
8985 | creators: [Creator!]
8986 | toStix: String
8987 | importFiles(
8988 | first: Int
8989 | prefixMimeType: String
8990 | after: ID
8991 | orderBy: FileOrdering
8992 | orderMode: OrderingMode
8993 | search: String
8994 | filters: FilterGroup
8995 | ): FileConnection
8996 | pendingFiles(
8997 | first: Int
8998 | after: ID
8999 | orderBy: FileOrdering
9000 | orderMode: OrderingMode
9001 | search: String
9002 | filters: FilterGroup
9003 | ): FileConnection
9004 | exportFiles(first: Int): FileConnection
9005 | editContext: [EditUserContext!]
9006 | connectors(onlyAlive: Boolean): [Connector]
9007 | jobs(first: Int): [Work]
9008 | }
9009 | input IPv4AddrAddInput {
9010 | value: String
9011 | belongsTo: [String]
9012 | resolvesTo: [String]
9013 | file: Upload
9014 | }
9015 | type IPv6Addr implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
9016 | id: ID! # internal_id
9017 | standard_id: String!
9018 | entity_type: String!
9019 | parent_types: [String]!
9020 | # StixObject
9021 | representative: Representative!
9022 | x_opencti_stix_ids: [StixId]
9023 | is_inferred: Boolean!
9024 | spec_version: String!
9025 | created_at: DateTime!
9026 | updated_at: DateTime!
9027 | draftVersion: DraftVersion
9028 | # inferences
9029 | x_opencti_inferences: [Inference]
9030 | # StixCoreObject
9031 | createdBy: Identity
9032 | numberOfConnectedElement: Int!
9033 | objectMarking: [MarkingDefinition!]
9034 | objectOrganization: [Organization!]
9035 | objectLabel: [Label!]
9036 | externalReferences(first: Int): ExternalReferenceConnection
9037 | containersNumber: Number
9038 | containers(first: Int, entityTypes: [String!]): ContainerConnection
9039 | reports(first: Int): ReportConnection
9040 | notes(first: Int): NoteConnection
9041 | opinions(first: Int): OpinionConnection
9042 | observedData(first: Int): ObservedDataConnection
9043 | groupings(first: Int): GroupingConnection
9044 | cases(first: Int): CaseConnection
9045 | stixCoreRelationships(
9046 | first: Int
9047 | after: ID
9048 | orderBy: StixCoreRelationshipsOrdering
9049 | orderMode: OrderingMode
9050 | fromId: StixRef
9051 | toId: StixRef
9052 | fromTypes: [String]
9053 | toTypes: [String]
9054 | relationship_type: String
9055 | startTimeStart: DateTime
9056 | startTimeStop: DateTime
9057 | stopTimeStart: DateTime
9058 | stopTimeStop: DateTime
9059 | firstSeenStart: DateTime
9060 | firstSeenStop: DateTime
9061 | lastSeenStart: DateTime
9062 | lastSeenStop: DateTime
9063 | confidences: [Int]
9064 | search: String
9065 | filters: FilterGroup
9066 | ): StixCoreRelationshipConnection
9067 | stixCoreObjectsDistribution(
9068 | relationship_type: [String]
9069 | toTypes: [String]
9070 | field: String!
9071 | startDate: DateTime
9072 | endDate: DateTime
9073 | dateAttribute: String
9074 | operation: StatsOperation!
9075 | limit: Int
9076 | order: String
9077 | types: [String]
9078 | filters: FilterGroup
9079 | search: String
9080 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9081 | stixCoreRelationshipsDistribution(
9082 | field: String!
9083 | operation: StatsOperation!
9084 | startDate: DateTime
9085 | endDate: DateTime
9086 | dateAttribute: String
9087 | isTo: Boolean
9088 | limit: Int
9089 | order: String
9090 | elementWithTargetTypes: [String]
9091 | fromId: [String]
9092 | fromRole: String
9093 | fromTypes: [String]
9094 | toId: [String]
9095 | toRole: String
9096 | toTypes: [String]
9097 | relationship_type: [String]
9098 | confidences: [Int]
9099 | search: String
9100 | filters: FilterGroup
9101 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9102 | opinions_metrics: OpinionsMetrics
9103 | # StixCyberObservable
9104 | x_opencti_score: Int
9105 | x_opencti_description: String
9106 | observable_value: String!
9107 | indicators(first: Int): IndicatorConnection
9108 | # IPv4Addr
9109 | value: String
9110 | countries: CountryConnection
9111 | # Technical
9112 | creators: [Creator!]
9113 | toStix: String
9114 | importFiles(
9115 | first: Int
9116 | prefixMimeType: String
9117 | after: ID
9118 | orderBy: FileOrdering
9119 | orderMode: OrderingMode
9120 | search: String
9121 | filters: FilterGroup
9122 | ): FileConnection
9123 | pendingFiles(
9124 | first: Int
9125 | after: ID
9126 | orderBy: FileOrdering
9127 | orderMode: OrderingMode
9128 | search: String
9129 | filters: FilterGroup
9130 | ): FileConnection
9131 | exportFiles(first: Int): FileConnection
9132 | editContext: [EditUserContext!]
9133 | connectors(onlyAlive: Boolean): [Connector]
9134 | jobs(first: Int): [Work]
9135 | }
9136 | input IPv6AddrAddInput {
9137 | value: String
9138 | file: Upload
9139 | }
9140 | type MacAddr implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
9141 | id: ID! # internal_id
9142 | standard_id: String!
9143 | entity_type: String!
9144 | parent_types: [String]!
9145 | # StixObject
9146 | representative: Representative!
9147 | x_opencti_stix_ids: [StixId]
9148 | is_inferred: Boolean!
9149 | spec_version: String!
9150 | created_at: DateTime!
9151 | updated_at: DateTime!
9152 | draftVersion: DraftVersion
9153 | # inferences
9154 | x_opencti_inferences: [Inference]
9155 | # StixCoreObject
9156 | createdBy: Identity
9157 | numberOfConnectedElement: Int!
9158 | objectMarking: [MarkingDefinition!]
9159 | objectOrganization: [Organization!]
9160 | objectLabel: [Label!]
9161 | externalReferences(first: Int): ExternalReferenceConnection
9162 | containersNumber: Number
9163 | containers(first: Int, entityTypes: [String!]): ContainerConnection
9164 | reports(first: Int): ReportConnection
9165 | notes(first: Int): NoteConnection
9166 | opinions(first: Int): OpinionConnection
9167 | observedData(first: Int): ObservedDataConnection
9168 | groupings(first: Int): GroupingConnection
9169 | cases(first: Int): CaseConnection
9170 | stixCoreRelationships(
9171 | first: Int
9172 | after: ID
9173 | orderBy: StixCoreRelationshipsOrdering
9174 | orderMode: OrderingMode
9175 | fromId: StixRef
9176 | toId: StixRef
9177 | fromTypes: [String]
9178 | toTypes: [String]
9179 | relationship_type: String
9180 | startTimeStart: DateTime
9181 | startTimeStop: DateTime
9182 | stopTimeStart: DateTime
9183 | stopTimeStop: DateTime
9184 | firstSeenStart: DateTime
9185 | firstSeenStop: DateTime
9186 | lastSeenStart: DateTime
9187 | lastSeenStop: DateTime
9188 | confidences: [Int]
9189 | search: String
9190 | filters: FilterGroup
9191 | ): StixCoreRelationshipConnection
9192 | stixCoreObjectsDistribution(
9193 | relationship_type: [String]
9194 | toTypes: [String]
9195 | field: String!
9196 | startDate: DateTime
9197 | endDate: DateTime
9198 | dateAttribute: String
9199 | operation: StatsOperation!
9200 | limit: Int
9201 | order: String
9202 | types: [String]
9203 | filters: FilterGroup
9204 | search: String
9205 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9206 | stixCoreRelationshipsDistribution(
9207 | field: String!
9208 | operation: StatsOperation!
9209 | startDate: DateTime
9210 | endDate: DateTime
9211 | dateAttribute: String
9212 | isTo: Boolean
9213 | limit: Int
9214 | order: String
9215 | elementWithTargetTypes: [String]
9216 | fromId: [String]
9217 | fromRole: String
9218 | fromTypes: [String]
9219 | toId: [String]
9220 | toRole: String
9221 | toTypes: [String]
9222 | relationship_type: [String]
9223 | confidences: [Int]
9224 | search: String
9225 | filters: FilterGroup
9226 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9227 | opinions_metrics: OpinionsMetrics
9228 | # StixCyberObservable
9229 | x_opencti_score: Int
9230 | x_opencti_description: String
9231 | observable_value: String!
9232 | indicators(first: Int): IndicatorConnection
9233 | # MacAddr
9234 | value: String
9235 | # Technical
9236 | creators: [Creator!]
9237 | toStix: String
9238 | importFiles(
9239 | first: Int
9240 | prefixMimeType: String
9241 | after: ID
9242 | orderBy: FileOrdering
9243 | orderMode: OrderingMode
9244 | search: String
9245 | filters: FilterGroup
9246 | ): FileConnection
9247 | pendingFiles(
9248 | first: Int
9249 | after: ID
9250 | orderBy: FileOrdering
9251 | orderMode: OrderingMode
9252 | search: String
9253 | filters: FilterGroup
9254 | ): FileConnection
9255 | exportFiles(first: Int): FileConnection
9256 | editContext: [EditUserContext!]
9257 | connectors(onlyAlive: Boolean): [Connector]
9258 | jobs(first: Int): [Work]
9259 | }
9260 | input MacAddrAddInput {
9261 | value: String
9262 | file: Upload
9263 | }
9264 | type Mutex implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
9265 | id: ID! # internal_id
9266 | standard_id: String!
9267 | entity_type: String!
9268 | parent_types: [String]!
9269 | # StixObject
9270 | representative: Representative!
9271 | x_opencti_stix_ids: [StixId]
9272 | is_inferred: Boolean!
9273 | spec_version: String!
9274 | created_at: DateTime!
9275 | updated_at: DateTime!
9276 | draftVersion: DraftVersion
9277 | # inferences
9278 | x_opencti_inferences: [Inference]
9279 | # StixCoreObject
9280 | createdBy: Identity
9281 | numberOfConnectedElement: Int!
9282 | objectMarking: [MarkingDefinition!]
9283 | objectOrganization: [Organization!]
9284 | objectLabel: [Label!]
9285 | externalReferences(first: Int): ExternalReferenceConnection
9286 | containersNumber: Number
9287 | containers(first: Int, entityTypes: [String!]): ContainerConnection
9288 | reports(first: Int): ReportConnection
9289 | notes(first: Int): NoteConnection
9290 | opinions(first: Int): OpinionConnection
9291 | observedData(first: Int): ObservedDataConnection
9292 | groupings(first: Int): GroupingConnection
9293 | cases(first: Int): CaseConnection
9294 | stixCoreRelationships(
9295 | first: Int
9296 | after: ID
9297 | orderBy: StixCoreRelationshipsOrdering
9298 | orderMode: OrderingMode
9299 | fromId: StixRef
9300 | toId: StixRef
9301 | fromTypes: [String]
9302 | toTypes: [String]
9303 | relationship_type: String
9304 | startTimeStart: DateTime
9305 | startTimeStop: DateTime
9306 | stopTimeStart: DateTime
9307 | stopTimeStop: DateTime
9308 | firstSeenStart: DateTime
9309 | firstSeenStop: DateTime
9310 | lastSeenStart: DateTime
9311 | lastSeenStop: DateTime
9312 | confidences: [Int]
9313 | search: String
9314 | filters: FilterGroup
9315 | ): StixCoreRelationshipConnection
9316 | stixCoreObjectsDistribution(
9317 | relationship_type: [String]
9318 | toTypes: [String]
9319 | field: String!
9320 | startDate: DateTime
9321 | endDate: DateTime
9322 | dateAttribute: String
9323 | operation: StatsOperation!
9324 | limit: Int
9325 | order: String
9326 | types: [String]
9327 | filters: FilterGroup
9328 | search: String
9329 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9330 | stixCoreRelationshipsDistribution(
9331 | field: String!
9332 | operation: StatsOperation!
9333 | startDate: DateTime
9334 | endDate: DateTime
9335 | dateAttribute: String
9336 | isTo: Boolean
9337 | limit: Int
9338 | order: String
9339 | elementWithTargetTypes: [String]
9340 | fromId: [String]
9341 | fromRole: String
9342 | fromTypes: [String]
9343 | toId: [String]
9344 | toRole: String
9345 | toTypes: [String]
9346 | relationship_type: [String]
9347 | confidences: [Int]
9348 | search: String
9349 | filters: FilterGroup
9350 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9351 | opinions_metrics: OpinionsMetrics
9352 | # StixCyberObservable
9353 | x_opencti_score: Int
9354 | x_opencti_description: String
9355 | observable_value: String!
9356 | indicators(first: Int): IndicatorConnection
9357 | # Mutex
9358 | name: String
9359 | # Technical
9360 | creators: [Creator!]
9361 | toStix: String
9362 | importFiles(
9363 | first: Int
9364 | prefixMimeType: String
9365 | after: ID
9366 | orderBy: FileOrdering
9367 | orderMode: OrderingMode
9368 | search: String
9369 | filters: FilterGroup
9370 | ): FileConnection
9371 | pendingFiles(
9372 | first: Int
9373 | after: ID
9374 | orderBy: FileOrdering
9375 | orderMode: OrderingMode
9376 | search: String
9377 | filters: FilterGroup
9378 | ): FileConnection
9379 | exportFiles(first: Int): FileConnection
9380 | editContext: [EditUserContext!]
9381 | connectors(onlyAlive: Boolean): [Connector]
9382 | jobs(first: Int): [Work]
9383 | }
9384 | input MutexAddInput {
9385 | name: String
9386 | file: Upload
9387 | }
9388 | type NetworkTraffic implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
9389 | id: ID! # internal_id
9390 | standard_id: String!
9391 | entity_type: String!
9392 | parent_types: [String]!
9393 | # StixObject
9394 | representative: Representative!
9395 | x_opencti_stix_ids: [StixId]
9396 | is_inferred: Boolean!
9397 | spec_version: String!
9398 | created_at: DateTime!
9399 | updated_at: DateTime!
9400 | draftVersion: DraftVersion
9401 | # inferences
9402 | x_opencti_inferences: [Inference]
9403 | # StixCoreObject
9404 | createdBy: Identity
9405 | numberOfConnectedElement: Int!
9406 | objectMarking: [MarkingDefinition!]
9407 | objectOrganization: [Organization!]
9408 | objectLabel: [Label!]
9409 | externalReferences(first: Int): ExternalReferenceConnection
9410 | containersNumber: Number
9411 | containers(first: Int, entityTypes: [String!]): ContainerConnection
9412 | reports(first: Int): ReportConnection
9413 | notes(first: Int): NoteConnection
9414 | opinions(first: Int): OpinionConnection
9415 | observedData(first: Int): ObservedDataConnection
9416 | groupings(first: Int): GroupingConnection
9417 | cases(first: Int): CaseConnection
9418 | stixCoreRelationships(
9419 | first: Int
9420 | after: ID
9421 | orderBy: StixCoreRelationshipsOrdering
9422 | orderMode: OrderingMode
9423 | fromId: StixRef
9424 | toId: StixRef
9425 | fromTypes: [String]
9426 | toTypes: [String]
9427 | relationship_type: String
9428 | startTimeStart: DateTime
9429 | startTimeStop: DateTime
9430 | stopTimeStart: DateTime
9431 | stopTimeStop: DateTime
9432 | firstSeenStart: DateTime
9433 | firstSeenStop: DateTime
9434 | lastSeenStart: DateTime
9435 | lastSeenStop: DateTime
9436 | confidences: [Int]
9437 | search: String
9438 | filters: FilterGroup
9439 | ): StixCoreRelationshipConnection
9440 | stixCoreObjectsDistribution(
9441 | relationship_type: [String]
9442 | toTypes: [String]
9443 | field: String!
9444 | startDate: DateTime
9445 | endDate: DateTime
9446 | dateAttribute: String
9447 | operation: StatsOperation!
9448 | limit: Int
9449 | order: String
9450 | types: [String]
9451 | filters: FilterGroup
9452 | search: String
9453 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9454 | stixCoreRelationshipsDistribution(
9455 | field: String!
9456 | operation: StatsOperation!
9457 | startDate: DateTime
9458 | endDate: DateTime
9459 | dateAttribute: String
9460 | isTo: Boolean
9461 | limit: Int
9462 | order: String
9463 | elementWithTargetTypes: [String]
9464 | fromId: [String]
9465 | fromRole: String
9466 | fromTypes: [String]
9467 | toId: [String]
9468 | toRole: String
9469 | toTypes: [String]
9470 | relationship_type: [String]
9471 | confidences: [Int]
9472 | search: String
9473 | filters: FilterGroup
9474 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9475 | opinions_metrics: OpinionsMetrics
9476 | # StixCyberObservable
9477 | x_opencti_score: Int
9478 | x_opencti_description: String
9479 | observable_value: String!
9480 | indicators(first: Int): IndicatorConnection
9481 | # NetworkTraffic
9482 | extensions: String
9483 | start: DateTime
9484 | end: DateTime
9485 | is_active: Boolean
9486 | src_port: Int
9487 | dst_port: Int
9488 | protocols: [String]
9489 | src_byte_count: Int
9490 | dst_byte_count: Int
9491 | src_packets: Int
9492 | dst_packets: Int
9493 | # Technical
9494 | creators: [Creator!]
9495 | toStix: String
9496 | importFiles(
9497 | first: Int
9498 | prefixMimeType: String
9499 | after: ID
9500 | orderBy: FileOrdering
9501 | orderMode: OrderingMode
9502 | search: String
9503 | filters: FilterGroup
9504 | ): FileConnection
9505 | pendingFiles(
9506 | first: Int
9507 | after: ID
9508 | orderBy: FileOrdering
9509 | orderMode: OrderingMode
9510 | search: String
9511 | filters: FilterGroup
9512 | ): FileConnection
9513 | exportFiles(first: Int): FileConnection
9514 | editContext: [EditUserContext!]
9515 | connectors(onlyAlive: Boolean): [Connector]
9516 | jobs(first: Int): [Work]
9517 | }
9518 | input NetworkTrafficAddInput {
9519 | start: DateTime
9520 | end: DateTime
9521 | is_active: Boolean
9522 | networkSrc: String
9523 | networkDst: String
9524 | src_port: Int
9525 | dst_port: Int
9526 | protocols: [String]
9527 | src_byte_count: Int
9528 | dst_byte_count: Int
9529 | src_packets: Int
9530 | dst_packets: Int
9531 | file: Upload
9532 | }
9533 | type Process implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
9534 | id: ID! # internal_id
9535 | standard_id: String!
9536 | entity_type: String!
9537 | parent_types: [String]!
9538 | # StixObject
9539 | representative: Representative!
9540 | x_opencti_stix_ids: [StixId]
9541 | is_inferred: Boolean!
9542 | spec_version: String!
9543 | created_at: DateTime!
9544 | updated_at: DateTime!
9545 | draftVersion: DraftVersion
9546 | # inferences
9547 | x_opencti_inferences: [Inference]
9548 | # StixCoreObject
9549 | createdBy: Identity
9550 | numberOfConnectedElement: Int!
9551 | objectMarking: [MarkingDefinition!]
9552 | objectOrganization: [Organization!]
9553 | objectLabel: [Label!]
9554 | externalReferences(first: Int): ExternalReferenceConnection
9555 | containersNumber: Number
9556 | containers(first: Int, entityTypes: [String!]): ContainerConnection
9557 | reports(first: Int): ReportConnection
9558 | notes(first: Int): NoteConnection
9559 | opinions(first: Int): OpinionConnection
9560 | observedData(first: Int): ObservedDataConnection
9561 | groupings(first: Int): GroupingConnection
9562 | cases(first: Int): CaseConnection
9563 | stixCoreRelationships(
9564 | first: Int
9565 | after: ID
9566 | orderBy: StixCoreRelationshipsOrdering
9567 | orderMode: OrderingMode
9568 | fromId: StixRef
9569 | toId: StixRef
9570 | fromTypes: [String]
9571 | toTypes: [String]
9572 | relationship_type: String
9573 | startTimeStart: DateTime
9574 | startTimeStop: DateTime
9575 | stopTimeStart: DateTime
9576 | stopTimeStop: DateTime
9577 | firstSeenStart: DateTime
9578 | firstSeenStop: DateTime
9579 | lastSeenStart: DateTime
9580 | lastSeenStop: DateTime
9581 | confidences: [Int]
9582 | search: String
9583 | filters: FilterGroup
9584 | ): StixCoreRelationshipConnection
9585 | stixCoreObjectsDistribution(
9586 | relationship_type: [String]
9587 | toTypes: [String]
9588 | field: String!
9589 | startDate: DateTime
9590 | endDate: DateTime
9591 | dateAttribute: String
9592 | operation: StatsOperation!
9593 | limit: Int
9594 | order: String
9595 | types: [String]
9596 | filters: FilterGroup
9597 | search: String
9598 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9599 | stixCoreRelationshipsDistribution(
9600 | field: String!
9601 | operation: StatsOperation!
9602 | startDate: DateTime
9603 | endDate: DateTime
9604 | dateAttribute: String
9605 | isTo: Boolean
9606 | limit: Int
9607 | order: String
9608 | elementWithTargetTypes: [String]
9609 | fromId: [String]
9610 | fromRole: String
9611 | fromTypes: [String]
9612 | toId: [String]
9613 | toRole: String
9614 | toTypes: [String]
9615 | relationship_type: [String]
9616 | confidences: [Int]
9617 | search: String
9618 | filters: FilterGroup
9619 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9620 | opinions_metrics: OpinionsMetrics
9621 | # StixCyberObservable
9622 | x_opencti_score: Int
9623 | x_opencti_description: String
9624 | observable_value: String!
9625 | indicators(first: Int): IndicatorConnection
9626 | # Process
9627 | extensions: String
9628 | is_hidden: Boolean
9629 | pid: Int
9630 | created_time: DateTime
9631 | cwd: String
9632 | command_line: String
9633 | environment_variables: [String]
9634 | ## windows-process-ext
9635 | aslr_enabled: Boolean
9636 | dep_enabled: Boolean
9637 | priority: String
9638 | owner_sid: String
9639 | window_title: String
9640 | startup_info: [Dictionary]
9641 | integrity_level: String
9642 | ## windows-service-ext
9643 | service_name: String
9644 | descriptions: [String]
9645 | display_name: String
9646 | group_name: String
9647 | start_type: String
9648 | serviceDlls: StixFileConnection
9649 | service_type: String
9650 | service_status: String
9651 | # Technical
9652 | creators: [Creator!]
9653 | toStix: String
9654 | importFiles(
9655 | first: Int
9656 | prefixMimeType: String
9657 | after: ID
9658 | orderBy: FileOrdering
9659 | orderMode: OrderingMode
9660 | search: String
9661 | filters: FilterGroup
9662 | ): FileConnection
9663 | pendingFiles(
9664 | first: Int
9665 | after: ID
9666 | orderBy: FileOrdering
9667 | orderMode: OrderingMode
9668 | search: String
9669 | filters: FilterGroup
9670 | ): FileConnection
9671 | exportFiles(first: Int): FileConnection
9672 | editContext: [EditUserContext!]
9673 | connectors(onlyAlive: Boolean): [Connector]
9674 | jobs(first: Int): [Work]
9675 | }
9676 | input ProcessAddInput {
9677 | is_hidden: Boolean
9678 | pid: Int
9679 | created_time: DateTime
9680 | cwd: String
9681 | x_opencti_description: String
9682 | command_line: String!
9683 | environment_variables: [String]
9684 | ## windows-process-ext
9685 | aslr_enabled: Boolean
9686 | dep_enabled: Boolean
9687 | priority: String
9688 | owner_sid: String
9689 | window_title: String
9690 | startup_info: [DictionaryInput]
9691 | integrity_level: String # windows-integrity-level-enum
9692 | ## windows-service-ext
9693 | service_name: String
9694 | descriptions: [String]
9695 | display_name: String
9696 | group_name: String
9697 | start_type: String # windows-service-start-type-enum
9698 | serviceDlls: [String] # service_dll_refs
9699 | service_type: String # windows-service-type-enum
9700 | service_status: String # windows-service-status-enum
9701 | file: Upload
9702 | }
9703 | type Software implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
9704 | id: ID! # internal_id
9705 | standard_id: String!
9706 | entity_type: String!
9707 | parent_types: [String]!
9708 | # StixObject
9709 | representative: Representative!
9710 | x_opencti_stix_ids: [StixId]
9711 | is_inferred: Boolean!
9712 | spec_version: String!
9713 | created_at: DateTime!
9714 | updated_at: DateTime!
9715 | draftVersion: DraftVersion
9716 | # inferences
9717 | x_opencti_inferences: [Inference]
9718 | # StixCoreObject
9719 | createdBy: Identity
9720 | numberOfConnectedElement: Int!
9721 | objectMarking: [MarkingDefinition!]
9722 | objectOrganization: [Organization!]
9723 | objectLabel: [Label!]
9724 | externalReferences(first: Int): ExternalReferenceConnection
9725 | containersNumber: Number
9726 | containers(first: Int, entityTypes: [String!]): ContainerConnection
9727 | reports(first: Int): ReportConnection
9728 | notes(first: Int): NoteConnection
9729 | opinions(first: Int): OpinionConnection
9730 | observedData(first: Int): ObservedDataConnection
9731 | groupings(first: Int): GroupingConnection
9732 | cases(first: Int): CaseConnection
9733 | stixCoreRelationships(
9734 | first: Int
9735 | after: ID
9736 | orderBy: StixCoreRelationshipsOrdering
9737 | orderMode: OrderingMode
9738 | fromId: StixRef
9739 | toId: StixRef
9740 | fromTypes: [String]
9741 | toTypes: [String]
9742 | relationship_type: String
9743 | startTimeStart: DateTime
9744 | startTimeStop: DateTime
9745 | stopTimeStart: DateTime
9746 | stopTimeStop: DateTime
9747 | firstSeenStart: DateTime
9748 | firstSeenStop: DateTime
9749 | lastSeenStart: DateTime
9750 | lastSeenStop: DateTime
9751 | confidences: [Int]
9752 | search: String
9753 | filters: FilterGroup
9754 | ): StixCoreRelationshipConnection
9755 | stixCoreObjectsDistribution(
9756 | relationship_type: [String]
9757 | toTypes: [String]
9758 | field: String!
9759 | startDate: DateTime
9760 | endDate: DateTime
9761 | dateAttribute: String
9762 | operation: StatsOperation!
9763 | limit: Int
9764 | order: String
9765 | types: [String]
9766 | filters: FilterGroup
9767 | search: String
9768 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9769 | stixCoreRelationshipsDistribution(
9770 | field: String!
9771 | operation: StatsOperation!
9772 | startDate: DateTime
9773 | endDate: DateTime
9774 | dateAttribute: String
9775 | isTo: Boolean
9776 | limit: Int
9777 | order: String
9778 | elementWithTargetTypes: [String]
9779 | fromId: [String]
9780 | fromRole: String
9781 | fromTypes: [String]
9782 | toId: [String]
9783 | toRole: String
9784 | toTypes: [String]
9785 | relationship_type: [String]
9786 | confidences: [Int]
9787 | search: String
9788 | filters: FilterGroup
9789 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9790 | opinions_metrics: OpinionsMetrics
9791 | # StixCyberObservable
9792 | x_opencti_score: Int
9793 | x_opencti_description: String
9794 | observable_value: String!
9795 | indicators(first: Int): IndicatorConnection
9796 | # Software
9797 | name: String
9798 | cpe: String
9799 | swid: String
9800 | languages: [String]
9801 | vendor: String
9802 | version: String
9803 | vulnerabilities: VulnerabilityConnection
9804 | # Technical
9805 | creators: [Creator!]
9806 | toStix: String
9807 | importFiles(
9808 | first: Int
9809 | prefixMimeType: String
9810 | after: ID
9811 | orderBy: FileOrdering
9812 | orderMode: OrderingMode
9813 | search: String
9814 | filters: FilterGroup
9815 | ): FileConnection
9816 | pendingFiles(
9817 | first: Int
9818 | after: ID
9819 | orderBy: FileOrdering
9820 | orderMode: OrderingMode
9821 | search: String
9822 | filters: FilterGroup
9823 | ): FileConnection
9824 | exportFiles(first: Int): FileConnection
9825 | editContext: [EditUserContext!]
9826 | connectors(onlyAlive: Boolean): [Connector]
9827 | jobs(first: Int): [Work]
9828 | }
9829 | type SoftwareConnection {
9830 | pageInfo: PageInfo!
9831 | edges: [SoftwareEdge!]!
9832 | }
9833 | type SoftwareEdge {
9834 | cursor: String!
9835 | node: Software!
9836 | }
9837 | input SoftwareAddInput {
9838 | name: String
9839 | cpe: String
9840 | swid: String
9841 | languages: [String]
9842 | vendor: String
9843 | version: String
9844 | file: Upload
9845 | }
9846 | type Url implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
9847 | id: ID! # internal_id
9848 | standard_id: String!
9849 | entity_type: String!
9850 | parent_types: [String]!
9851 | # StixObject
9852 | representative: Representative!
9853 | x_opencti_stix_ids: [StixId]
9854 | is_inferred: Boolean!
9855 | spec_version: String!
9856 | created_at: DateTime!
9857 | updated_at: DateTime!
9858 | draftVersion: DraftVersion
9859 | # inferences
9860 | x_opencti_inferences: [Inference]
9861 | # StixCoreObject
9862 | createdBy: Identity
9863 | numberOfConnectedElement: Int!
9864 | objectMarking: [MarkingDefinition!]
9865 | objectOrganization: [Organization!]
9866 | objectLabel: [Label!]
9867 | externalReferences(first: Int): ExternalReferenceConnection
9868 | containersNumber: Number
9869 | containers(first: Int, entityTypes: [String!]): ContainerConnection
9870 | reports(first: Int): ReportConnection
9871 | notes(first: Int): NoteConnection
9872 | opinions(first: Int): OpinionConnection
9873 | observedData(first: Int): ObservedDataConnection
9874 | groupings(first: Int): GroupingConnection
9875 | cases(first: Int): CaseConnection
9876 | stixCoreRelationships(
9877 | first: Int
9878 | after: ID
9879 | orderBy: StixCoreRelationshipsOrdering
9880 | orderMode: OrderingMode
9881 | fromId: StixRef
9882 | toId: StixRef
9883 | fromTypes: [String]
9884 | toTypes: [String]
9885 | relationship_type: String
9886 | startTimeStart: DateTime
9887 | startTimeStop: DateTime
9888 | stopTimeStart: DateTime
9889 | stopTimeStop: DateTime
9890 | firstSeenStart: DateTime
9891 | firstSeenStop: DateTime
9892 | lastSeenStart: DateTime
9893 | lastSeenStop: DateTime
9894 | confidences: [Int]
9895 | search: String
9896 | filters: FilterGroup
9897 | ): StixCoreRelationshipConnection
9898 | stixCoreObjectsDistribution(
9899 | relationship_type: [String]
9900 | toTypes: [String]
9901 | field: String!
9902 | startDate: DateTime
9903 | endDate: DateTime
9904 | dateAttribute: String
9905 | operation: StatsOperation!
9906 | limit: Int
9907 | order: String
9908 | types: [String]
9909 | filters: FilterGroup
9910 | search: String
9911 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9912 | stixCoreRelationshipsDistribution(
9913 | field: String!
9914 | operation: StatsOperation!
9915 | startDate: DateTime
9916 | endDate: DateTime
9917 | dateAttribute: String
9918 | isTo: Boolean
9919 | limit: Int
9920 | order: String
9921 | elementWithTargetTypes: [String]
9922 | fromId: [String]
9923 | fromRole: String
9924 | fromTypes: [String]
9925 | toId: [String]
9926 | toRole: String
9927 | toTypes: [String]
9928 | relationship_type: [String]
9929 | confidences: [Int]
9930 | search: String
9931 | filters: FilterGroup
9932 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
9933 | opinions_metrics: OpinionsMetrics
9934 | # StixCyberObservable
9935 | x_opencti_score: Int
9936 | x_opencti_description: String
9937 | observable_value: String!
9938 | indicators(first: Int): IndicatorConnection
9939 | # Url
9940 | value: String
9941 | # Technical
9942 | creators: [Creator!]
9943 | toStix: String
9944 | importFiles(
9945 | first: Int
9946 | prefixMimeType: String
9947 | after: ID
9948 | orderBy: FileOrdering
9949 | orderMode: OrderingMode
9950 | search: String
9951 | filters: FilterGroup
9952 | ): FileConnection
9953 | pendingFiles(
9954 | first: Int
9955 | after: ID
9956 | orderBy: FileOrdering
9957 | orderMode: OrderingMode
9958 | search: String
9959 | filters: FilterGroup
9960 | ): FileConnection
9961 | exportFiles(first: Int): FileConnection
9962 | editContext: [EditUserContext!]
9963 | connectors(onlyAlive: Boolean): [Connector]
9964 | jobs(first: Int): [Work]
9965 | }
9966 | input UrlAddInput {
9967 | value: String
9968 | file: Upload
9969 | }
9970 | type UserAccount implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
9971 | id: ID! # internal_id
9972 | standard_id: String!
9973 | entity_type: String!
9974 | parent_types: [String]!
9975 | # StixObject
9976 | representative: Representative!
9977 | x_opencti_stix_ids: [StixId]
9978 | is_inferred: Boolean!
9979 | spec_version: String!
9980 | created_at: DateTime!
9981 | updated_at: DateTime!
9982 | draftVersion: DraftVersion
9983 | # inferences
9984 | x_opencti_inferences: [Inference]
9985 | # StixCoreObject
9986 | createdBy: Identity
9987 | numberOfConnectedElement: Int!
9988 | objectMarking: [MarkingDefinition!]
9989 | objectOrganization: [Organization!]
9990 | objectLabel: [Label!]
9991 | externalReferences(first: Int): ExternalReferenceConnection
9992 | containersNumber: Number
9993 | containers(first: Int, entityTypes: [String!]): ContainerConnection
9994 | reports(first: Int): ReportConnection
9995 | notes(first: Int): NoteConnection
9996 | opinions(first: Int): OpinionConnection
9997 | observedData(first: Int): ObservedDataConnection
9998 | groupings(first: Int): GroupingConnection
9999 | cases(first: Int): CaseConnection
10000 | stixCoreRelationships(
10001 | first: Int
10002 | after: ID
10003 | orderBy: StixCoreRelationshipsOrdering
10004 | orderMode: OrderingMode
10005 | fromId: StixRef
10006 | toId: StixRef
10007 | fromTypes: [String]
10008 | toTypes: [String]
10009 | relationship_type: String
10010 | startTimeStart: DateTime
10011 | startTimeStop: DateTime
10012 | stopTimeStart: DateTime
10013 | stopTimeStop: DateTime
10014 | firstSeenStart: DateTime
10015 | firstSeenStop: DateTime
10016 | lastSeenStart: DateTime
10017 | lastSeenStop: DateTime
10018 | confidences: [Int]
10019 | search: String
10020 | filters: FilterGroup
10021 | ): StixCoreRelationshipConnection
10022 | stixCoreObjectsDistribution(
10023 | relationship_type: [String]
10024 | toTypes: [String]
10025 | field: String!
10026 | startDate: DateTime
10027 | endDate: DateTime
10028 | dateAttribute: String
10029 | operation: StatsOperation!
10030 | limit: Int
10031 | order: String
10032 | types: [String]
10033 | filters: FilterGroup
10034 | search: String
10035 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10036 | stixCoreRelationshipsDistribution(
10037 | field: String!
10038 | operation: StatsOperation!
10039 | startDate: DateTime
10040 | endDate: DateTime
10041 | dateAttribute: String
10042 | isTo: Boolean
10043 | limit: Int
10044 | order: String
10045 | elementWithTargetTypes: [String]
10046 | fromId: [String]
10047 | fromRole: String
10048 | fromTypes: [String]
10049 | toId: [String]
10050 | toRole: String
10051 | toTypes: [String]
10052 | relationship_type: [String]
10053 | confidences: [Int]
10054 | search: String
10055 | filters: FilterGroup
10056 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10057 | opinions_metrics: OpinionsMetrics
10058 | # StixCyberObservable
10059 | x_opencti_score: Int
10060 | x_opencti_description: String
10061 | observable_value: String!
10062 | indicators(first: Int): IndicatorConnection
10063 | # UserAccount
10064 | extensions: String
10065 | user_id: String
10066 | credential: String
10067 | account_login: String
10068 | account_type: String
10069 | display_name: String
10070 | is_service_account: Boolean
10071 | is_privileged: Boolean
10072 | can_escalate_privs: Boolean
10073 | is_disabled: Boolean
10074 | account_created: DateTime
10075 | account_expires: DateTime
10076 | credential_last_changed: DateTime
10077 | account_first_login: DateTime
10078 | account_last_login: DateTime
10079 | # Technical
10080 | creators: [Creator!]
10081 | toStix: String
10082 | importFiles(
10083 | first: Int
10084 | prefixMimeType: String
10085 | after: ID
10086 | orderBy: FileOrdering
10087 | orderMode: OrderingMode
10088 | search: String
10089 | filters: FilterGroup
10090 | ): FileConnection
10091 | pendingFiles(
10092 | first: Int
10093 | after: ID
10094 | orderBy: FileOrdering
10095 | orderMode: OrderingMode
10096 | search: String
10097 | filters: FilterGroup
10098 | ): FileConnection
10099 | exportFiles(first: Int): FileConnection
10100 | editContext: [EditUserContext!]
10101 | connectors(onlyAlive: Boolean): [Connector]
10102 | jobs(first: Int): [Work]
10103 | }
10104 | input UserAccountAddInput {
10105 | user_id: String
10106 | credential: String
10107 | account_login: String
10108 | account_type: String
10109 | display_name: String
10110 | is_service_account: Boolean
10111 | is_privileged: Boolean
10112 | can_escalate_privs: Boolean
10113 | is_disabled: Boolean
10114 | account_created: DateTime
10115 | account_expires: DateTime
10116 | credential_last_changed: DateTime
10117 | account_first_login: DateTime
10118 | account_last_login: DateTime
10119 | file: Upload
10120 | }
10121 | type WindowsRegistryKey implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
10122 | id: ID! # internal_id
10123 | standard_id: String!
10124 | entity_type: String!
10125 | parent_types: [String]!
10126 | # StixObject
10127 | representative: Representative!
10128 | x_opencti_stix_ids: [StixId]
10129 | is_inferred: Boolean!
10130 | spec_version: String!
10131 | created_at: DateTime!
10132 | updated_at: DateTime!
10133 | draftVersion: DraftVersion
10134 | # inferences
10135 | x_opencti_inferences: [Inference]
10136 | # StixCoreObject
10137 | createdBy: Identity
10138 | numberOfConnectedElement: Int!
10139 | objectMarking: [MarkingDefinition!]
10140 | objectOrganization: [Organization!]
10141 | objectLabel: [Label!]
10142 | externalReferences(first: Int): ExternalReferenceConnection
10143 | containersNumber: Number
10144 | containers(first: Int, entityTypes: [String!]): ContainerConnection
10145 | reports(first: Int): ReportConnection
10146 | notes(first: Int): NoteConnection
10147 | opinions(first: Int): OpinionConnection
10148 | observedData(first: Int): ObservedDataConnection
10149 | groupings(first: Int): GroupingConnection
10150 | cases(first: Int): CaseConnection
10151 | stixCoreRelationships(
10152 | first: Int
10153 | after: ID
10154 | orderBy: StixCoreRelationshipsOrdering
10155 | orderMode: OrderingMode
10156 | fromId: StixRef
10157 | toId: StixRef
10158 | fromTypes: [String]
10159 | toTypes: [String]
10160 | relationship_type: String
10161 | startTimeStart: DateTime
10162 | startTimeStop: DateTime
10163 | stopTimeStart: DateTime
10164 | stopTimeStop: DateTime
10165 | firstSeenStart: DateTime
10166 | firstSeenStop: DateTime
10167 | lastSeenStart: DateTime
10168 | lastSeenStop: DateTime
10169 | confidences: [Int]
10170 | search: String
10171 | filters: FilterGroup
10172 | ): StixCoreRelationshipConnection
10173 | stixCoreObjectsDistribution(
10174 | relationship_type: [String]
10175 | toTypes: [String]
10176 | field: String!
10177 | startDate: DateTime
10178 | endDate: DateTime
10179 | dateAttribute: String
10180 | operation: StatsOperation!
10181 | limit: Int
10182 | order: String
10183 | types: [String]
10184 | filters: FilterGroup
10185 | search: String
10186 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10187 | stixCoreRelationshipsDistribution(
10188 | field: String!
10189 | operation: StatsOperation!
10190 | startDate: DateTime
10191 | endDate: DateTime
10192 | dateAttribute: String
10193 | isTo: Boolean
10194 | limit: Int
10195 | order: String
10196 | elementWithTargetTypes: [String]
10197 | fromId: [String]
10198 | fromRole: String
10199 | fromTypes: [String]
10200 | toId: [String]
10201 | toRole: String
10202 | toTypes: [String]
10203 | relationship_type: [String]
10204 | confidences: [Int]
10205 | search: String
10206 | filters: FilterGroup
10207 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10208 | opinions_metrics: OpinionsMetrics
10209 | # StixCyberObservable
10210 | x_opencti_score: Int
10211 | x_opencti_description: String
10212 | observable_value: String!
10213 | indicators(first: Int): IndicatorConnection
10214 | # WindowsRegistryKey
10215 | attribute_key: String
10216 | modified_time: DateTime
10217 | number_of_subkeys: Int
10218 | # Technical
10219 | creators: [Creator!]
10220 | toStix: String
10221 | importFiles(
10222 | first: Int
10223 | prefixMimeType: String
10224 | after: ID
10225 | orderBy: FileOrdering
10226 | orderMode: OrderingMode
10227 | search: String
10228 | filters: FilterGroup
10229 | ): FileConnection
10230 | pendingFiles(
10231 | first: Int
10232 | after: ID
10233 | orderBy: FileOrdering
10234 | orderMode: OrderingMode
10235 | search: String
10236 | filters: FilterGroup
10237 | ): FileConnection
10238 | exportFiles(first: Int): FileConnection
10239 | editContext: [EditUserContext!]
10240 | connectors(onlyAlive: Boolean): [Connector]
10241 | jobs(first: Int): [Work]
10242 | }
10243 | input WindowsRegistryKeyAddInput {
10244 | attribute_key: String
10245 | modified_time: DateTime
10246 | file: Upload
10247 | number_of_subkeys: Int
10248 | }
10249 | type WindowsRegistryValueType implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
10250 | id: ID! # internal_id
10251 | standard_id: String!
10252 | entity_type: String!
10253 | parent_types: [String]!
10254 | # StixObject
10255 | representative: Representative!
10256 | x_opencti_stix_ids: [StixId]
10257 | is_inferred: Boolean!
10258 | spec_version: String!
10259 | created_at: DateTime!
10260 | updated_at: DateTime!
10261 | draftVersion: DraftVersion
10262 | # inferences
10263 | x_opencti_inferences: [Inference]
10264 | # StixCoreObject
10265 | createdBy: Identity
10266 | numberOfConnectedElement: Int!
10267 | objectMarking: [MarkingDefinition!]
10268 | objectOrganization: [Organization!]
10269 | objectLabel: [Label!]
10270 | externalReferences(first: Int): ExternalReferenceConnection
10271 | containersNumber: Number
10272 | containers(first: Int, entityTypes: [String!]): ContainerConnection
10273 | reports(first: Int): ReportConnection
10274 | notes(first: Int): NoteConnection
10275 | opinions(first: Int): OpinionConnection
10276 | observedData(first: Int): ObservedDataConnection
10277 | groupings(first: Int): GroupingConnection
10278 | cases(first: Int): CaseConnection
10279 | stixCoreRelationships(
10280 | first: Int
10281 | after: ID
10282 | orderBy: StixCoreRelationshipsOrdering
10283 | orderMode: OrderingMode
10284 | fromId: StixRef
10285 | toId: StixRef
10286 | fromTypes: [String]
10287 | toTypes: [String]
10288 | relationship_type: String
10289 | startTimeStart: DateTime
10290 | startTimeStop: DateTime
10291 | stopTimeStart: DateTime
10292 | stopTimeStop: DateTime
10293 | firstSeenStart: DateTime
10294 | firstSeenStop: DateTime
10295 | lastSeenStart: DateTime
10296 | lastSeenStop: DateTime
10297 | confidences: [Int]
10298 | search: String
10299 | filters: FilterGroup
10300 | ): StixCoreRelationshipConnection
10301 | stixCoreObjectsDistribution(
10302 | relationship_type: [String]
10303 | toTypes: [String]
10304 | field: String!
10305 | startDate: DateTime
10306 | endDate: DateTime
10307 | dateAttribute: String
10308 | operation: StatsOperation!
10309 | limit: Int
10310 | order: String
10311 | types: [String]
10312 | filters: FilterGroup
10313 | search: String
10314 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10315 | stixCoreRelationshipsDistribution(
10316 | field: String!
10317 | operation: StatsOperation!
10318 | startDate: DateTime
10319 | endDate: DateTime
10320 | dateAttribute: String
10321 | isTo: Boolean
10322 | limit: Int
10323 | order: String
10324 | elementWithTargetTypes: [String]
10325 | fromId: [String]
10326 | fromRole: String
10327 | fromTypes: [String]
10328 | toId: [String]
10329 | toRole: String
10330 | toTypes: [String]
10331 | relationship_type: [String]
10332 | confidences: [Int]
10333 | search: String
10334 | filters: FilterGroup
10335 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10336 | opinions_metrics: OpinionsMetrics
10337 | # StixCyberObservable
10338 | x_opencti_score: Int
10339 | x_opencti_description: String
10340 | observable_value: String!
10341 | indicators(first: Int): IndicatorConnection
10342 | # WindowsRegistryKey
10343 | name: String
10344 | data: String
10345 | data_type: String
10346 | # Technical
10347 | creators: [Creator!]
10348 | toStix: String
10349 | importFiles(
10350 | first: Int
10351 | prefixMimeType: String
10352 | after: ID
10353 | orderBy: FileOrdering
10354 | orderMode: OrderingMode
10355 | search: String
10356 | filters: FilterGroup
10357 | ): FileConnection
10358 | pendingFiles(
10359 | first: Int
10360 | after: ID
10361 | orderBy: FileOrdering
10362 | orderMode: OrderingMode
10363 | search: String
10364 | filters: FilterGroup
10365 | ): FileConnection
10366 | exportFiles(first: Int): FileConnection
10367 | editContext: [EditUserContext!]
10368 | connectors(onlyAlive: Boolean): [Connector]
10369 | jobs(first: Int): [Work]
10370 | }
10371 | input WindowsRegistryValueTypeAddInput {
10372 | name: String
10373 | data: String
10374 | data_type: String
10375 | file: Upload
10376 | }
10377 | type CryptographicKey implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
10378 | id: ID! # internal_id
10379 | standard_id: String!
10380 | entity_type: String!
10381 | parent_types: [String]!
10382 | # StixObject
10383 | representative: Representative!
10384 | x_opencti_stix_ids: [StixId]
10385 | is_inferred: Boolean!
10386 | spec_version: String!
10387 | created_at: DateTime!
10388 | updated_at: DateTime!
10389 | draftVersion: DraftVersion
10390 | # inferences
10391 | x_opencti_inferences: [Inference]
10392 | # StixCoreObject
10393 | createdBy: Identity
10394 | numberOfConnectedElement: Int!
10395 | objectMarking: [MarkingDefinition!]
10396 | objectOrganization: [Organization!]
10397 | objectLabel: [Label!]
10398 | externalReferences(first: Int): ExternalReferenceConnection
10399 | containersNumber: Number
10400 | containers(first: Int, entityTypes: [String!]): ContainerConnection
10401 | reports(first: Int): ReportConnection
10402 | notes(first: Int): NoteConnection
10403 | opinions(first: Int): OpinionConnection
10404 | observedData(first: Int): ObservedDataConnection
10405 | groupings(first: Int): GroupingConnection
10406 | cases(first: Int): CaseConnection
10407 | stixCoreRelationships(
10408 | first: Int
10409 | after: ID
10410 | orderBy: StixCoreRelationshipsOrdering
10411 | orderMode: OrderingMode
10412 | fromId: StixRef
10413 | toId: StixRef
10414 | fromTypes: [String]
10415 | toTypes: [String]
10416 | relationship_type: String
10417 | startTimeStart: DateTime
10418 | startTimeStop: DateTime
10419 | stopTimeStart: DateTime
10420 | stopTimeStop: DateTime
10421 | firstSeenStart: DateTime
10422 | firstSeenStop: DateTime
10423 | lastSeenStart: DateTime
10424 | lastSeenStop: DateTime
10425 | confidences: [Int]
10426 | search: String
10427 | filters: FilterGroup
10428 | ): StixCoreRelationshipConnection
10429 | stixCoreObjectsDistribution(
10430 | relationship_type: [String]
10431 | toTypes: [String]
10432 | field: String!
10433 | startDate: DateTime
10434 | endDate: DateTime
10435 | dateAttribute: String
10436 | operation: StatsOperation!
10437 | limit: Int
10438 | order: String
10439 | types: [String]
10440 | filters: FilterGroup
10441 | search: String
10442 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10443 | stixCoreRelationshipsDistribution(
10444 | field: String!
10445 | operation: StatsOperation!
10446 | startDate: DateTime
10447 | endDate: DateTime
10448 | dateAttribute: String
10449 | isTo: Boolean
10450 | limit: Int
10451 | order: String
10452 | elementWithTargetTypes: [String]
10453 | fromId: [String]
10454 | fromRole: String
10455 | fromTypes: [String]
10456 | toId: [String]
10457 | toRole: String
10458 | toTypes: [String]
10459 | relationship_type: [String]
10460 | confidences: [Int]
10461 | search: String
10462 | filters: FilterGroup
10463 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10464 | opinions_metrics: OpinionsMetrics
10465 | # StixCyberObservable
10466 | x_opencti_score: Int
10467 | x_opencti_description: String
10468 | observable_value: String!
10469 | indicators(first: Int): IndicatorConnection
10470 | # CryptographicKey
10471 | value: String
10472 | # Technical
10473 | creators: [Creator!]
10474 | toStix: String
10475 | importFiles(
10476 | first: Int
10477 | prefixMimeType: String
10478 | after: ID
10479 | orderBy: FileOrdering
10480 | orderMode: OrderingMode
10481 | search: String
10482 | filters: FilterGroup
10483 | ): FileConnection
10484 | pendingFiles(
10485 | first: Int
10486 | after: ID
10487 | orderBy: FileOrdering
10488 | orderMode: OrderingMode
10489 | search: String
10490 | filters: FilterGroup
10491 | ): FileConnection
10492 | exportFiles(first: Int): FileConnection
10493 | editContext: [EditUserContext!]
10494 | connectors(onlyAlive: Boolean): [Connector]
10495 | jobs(first: Int): [Work]
10496 | }
10497 | input CryptographicKeyAddInput {
10498 | value: String
10499 | file: Upload
10500 | }
10501 | type CryptocurrencyWallet implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
10502 | id: ID! # internal_id
10503 | standard_id: String!
10504 | entity_type: String!
10505 | parent_types: [String]!
10506 | # StixObject
10507 | representative: Representative!
10508 | x_opencti_stix_ids: [StixId]
10509 | is_inferred: Boolean!
10510 | spec_version: String!
10511 | created_at: DateTime!
10512 | updated_at: DateTime!
10513 | draftVersion: DraftVersion
10514 | # inferences
10515 | x_opencti_inferences: [Inference]
10516 | # StixCoreObject
10517 | createdBy: Identity
10518 | numberOfConnectedElement: Int!
10519 | objectMarking: [MarkingDefinition!]
10520 | objectOrganization: [Organization!]
10521 | objectLabel: [Label!]
10522 | externalReferences(first: Int): ExternalReferenceConnection
10523 | containersNumber: Number
10524 | containers(first: Int, entityTypes: [String!]): ContainerConnection
10525 | reports(first: Int): ReportConnection
10526 | notes(first: Int): NoteConnection
10527 | opinions(first: Int): OpinionConnection
10528 | observedData(first: Int): ObservedDataConnection
10529 | groupings(first: Int): GroupingConnection
10530 | cases(first: Int): CaseConnection
10531 | stixCoreRelationships(
10532 | first: Int
10533 | after: ID
10534 | orderBy: StixCoreRelationshipsOrdering
10535 | orderMode: OrderingMode
10536 | fromId: StixRef
10537 | toId: StixRef
10538 | fromTypes: [String]
10539 | toTypes: [String]
10540 | relationship_type: String
10541 | startTimeStart: DateTime
10542 | startTimeStop: DateTime
10543 | stopTimeStart: DateTime
10544 | stopTimeStop: DateTime
10545 | firstSeenStart: DateTime
10546 | firstSeenStop: DateTime
10547 | lastSeenStart: DateTime
10548 | lastSeenStop: DateTime
10549 | confidences: [Int]
10550 | search: String
10551 | filters: FilterGroup
10552 | ): StixCoreRelationshipConnection
10553 | stixCoreObjectsDistribution(
10554 | relationship_type: [String]
10555 | toTypes: [String]
10556 | field: String!
10557 | startDate: DateTime
10558 | endDate: DateTime
10559 | dateAttribute: String
10560 | operation: StatsOperation!
10561 | limit: Int
10562 | order: String
10563 | types: [String]
10564 | filters: FilterGroup
10565 | search: String
10566 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10567 | stixCoreRelationshipsDistribution(
10568 | field: String!
10569 | operation: StatsOperation!
10570 | startDate: DateTime
10571 | endDate: DateTime
10572 | dateAttribute: String
10573 | isTo: Boolean
10574 | limit: Int
10575 | order: String
10576 | elementWithTargetTypes: [String]
10577 | fromId: [String]
10578 | fromRole: String
10579 | fromTypes: [String]
10580 | toId: [String]
10581 | toRole: String
10582 | toTypes: [String]
10583 | relationship_type: [String]
10584 | confidences: [Int]
10585 | search: String
10586 | filters: FilterGroup
10587 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10588 | opinions_metrics: OpinionsMetrics
10589 | # StixCyberObservable
10590 | x_opencti_score: Int
10591 | x_opencti_description: String
10592 | observable_value: String!
10593 | indicators(first: Int): IndicatorConnection
10594 | # CryptocurrencyWallet
10595 | value: String
10596 | # Technical
10597 | creators: [Creator!]
10598 | toStix: String
10599 | importFiles(
10600 | first: Int
10601 | prefixMimeType: String
10602 | after: ID
10603 | orderBy: FileOrdering
10604 | orderMode: OrderingMode
10605 | search: String
10606 | filters: FilterGroup
10607 | ): FileConnection
10608 | pendingFiles(
10609 | first: Int
10610 | after: ID
10611 | orderBy: FileOrdering
10612 | orderMode: OrderingMode
10613 | search: String
10614 | filters: FilterGroup
10615 | ): FileConnection
10616 | exportFiles(first: Int): FileConnection
10617 | editContext: [EditUserContext!]
10618 | connectors(onlyAlive: Boolean): [Connector]
10619 | jobs(first: Int): [Work]
10620 | }
10621 | input CryptocurrencyWalletAddInput {
10622 | value: String
10623 | file: Upload
10624 | }
10625 | type Hostname implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
10626 | id: ID! # internal_id
10627 | standard_id: String!
10628 | entity_type: String!
10629 | parent_types: [String]!
10630 | # StixObject
10631 | representative: Representative!
10632 | x_opencti_stix_ids: [StixId]
10633 | is_inferred: Boolean!
10634 | spec_version: String!
10635 | created_at: DateTime!
10636 | updated_at: DateTime!
10637 | draftVersion: DraftVersion
10638 | # inferences
10639 | x_opencti_inferences: [Inference]
10640 | # StixCoreObject
10641 | createdBy: Identity
10642 | numberOfConnectedElement: Int!
10643 | objectMarking: [MarkingDefinition!]
10644 | objectOrganization: [Organization!]
10645 | objectLabel: [Label!]
10646 | externalReferences(first: Int): ExternalReferenceConnection
10647 | containersNumber: Number
10648 | containers(first: Int, entityTypes: [String!]): ContainerConnection
10649 | reports(first: Int): ReportConnection
10650 | notes(first: Int): NoteConnection
10651 | opinions(first: Int): OpinionConnection
10652 | observedData(first: Int): ObservedDataConnection
10653 | groupings(first: Int): GroupingConnection
10654 | cases(first: Int): CaseConnection
10655 | stixCoreRelationships(
10656 | first: Int
10657 | after: ID
10658 | orderBy: StixCoreRelationshipsOrdering
10659 | orderMode: OrderingMode
10660 | fromId: StixRef
10661 | toId: StixRef
10662 | fromTypes: [String]
10663 | toTypes: [String]
10664 | relationship_type: String
10665 | startTimeStart: DateTime
10666 | startTimeStop: DateTime
10667 | stopTimeStart: DateTime
10668 | stopTimeStop: DateTime
10669 | firstSeenStart: DateTime
10670 | firstSeenStop: DateTime
10671 | lastSeenStart: DateTime
10672 | lastSeenStop: DateTime
10673 | confidences: [Int]
10674 | search: String
10675 | filters: FilterGroup
10676 | ): StixCoreRelationshipConnection
10677 | stixCoreObjectsDistribution(
10678 | relationship_type: [String]
10679 | toTypes: [String]
10680 | field: String!
10681 | startDate: DateTime
10682 | endDate: DateTime
10683 | dateAttribute: String
10684 | operation: StatsOperation!
10685 | limit: Int
10686 | order: String
10687 | types: [String]
10688 | filters: FilterGroup
10689 | search: String
10690 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10691 | stixCoreRelationshipsDistribution(
10692 | field: String!
10693 | operation: StatsOperation!
10694 | startDate: DateTime
10695 | endDate: DateTime
10696 | dateAttribute: String
10697 | isTo: Boolean
10698 | limit: Int
10699 | order: String
10700 | elementWithTargetTypes: [String]
10701 | fromId: [String]
10702 | fromRole: String
10703 | fromTypes: [String]
10704 | toId: [String]
10705 | toRole: String
10706 | toTypes: [String]
10707 | relationship_type: [String]
10708 | confidences: [Int]
10709 | search: String
10710 | filters: FilterGroup
10711 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10712 | opinions_metrics: OpinionsMetrics
10713 | # StixCyberObservable
10714 | x_opencti_score: Int
10715 | x_opencti_description: String
10716 | observable_value: String!
10717 | indicators(first: Int): IndicatorConnection
10718 | # Hostname
10719 | value: String
10720 | # Technical
10721 | creators: [Creator!]
10722 | toStix: String
10723 | importFiles(
10724 | first: Int
10725 | prefixMimeType: String
10726 | after: ID
10727 | orderBy: FileOrdering
10728 | orderMode: OrderingMode
10729 | search: String
10730 | filters: FilterGroup
10731 | ): FileConnection
10732 | pendingFiles(
10733 | first: Int
10734 | after: ID
10735 | orderBy: FileOrdering
10736 | orderMode: OrderingMode
10737 | search: String
10738 | filters: FilterGroup
10739 | ): FileConnection
10740 | exportFiles(first: Int): FileConnection
10741 | editContext: [EditUserContext!]
10742 | connectors(onlyAlive: Boolean): [Connector]
10743 | jobs(first: Int): [Work]
10744 | }
10745 | input HostnameAddInput {
10746 | value: String
10747 | file: Upload
10748 | }
10749 | type Text implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
10750 | id: ID! # internal_id
10751 | standard_id: String!
10752 | entity_type: String!
10753 | parent_types: [String]!
10754 | # StixObject
10755 | representative: Representative!
10756 | x_opencti_stix_ids: [StixId]
10757 | is_inferred: Boolean!
10758 | spec_version: String!
10759 | created_at: DateTime!
10760 | updated_at: DateTime!
10761 | draftVersion: DraftVersion
10762 | # inferences
10763 | x_opencti_inferences: [Inference]
10764 | # StixCoreObject
10765 | createdBy: Identity
10766 | numberOfConnectedElement: Int!
10767 | objectMarking: [MarkingDefinition!]
10768 | objectOrganization: [Organization!]
10769 | objectLabel: [Label!]
10770 | externalReferences(first: Int): ExternalReferenceConnection
10771 | containersNumber: Number
10772 | containers(first: Int, entityTypes: [String!]): ContainerConnection
10773 | reports(first: Int): ReportConnection
10774 | notes(first: Int): NoteConnection
10775 | opinions(first: Int): OpinionConnection
10776 | observedData(first: Int): ObservedDataConnection
10777 | groupings(first: Int): GroupingConnection
10778 | cases(first: Int): CaseConnection
10779 | stixCoreRelationships(
10780 | first: Int
10781 | after: ID
10782 | orderBy: StixCoreRelationshipsOrdering
10783 | orderMode: OrderingMode
10784 | fromId: StixRef
10785 | toId: StixRef
10786 | fromTypes: [String]
10787 | toTypes: [String]
10788 | relationship_type: String
10789 | startTimeStart: DateTime
10790 | startTimeStop: DateTime
10791 | stopTimeStart: DateTime
10792 | stopTimeStop: DateTime
10793 | firstSeenStart: DateTime
10794 | firstSeenStop: DateTime
10795 | lastSeenStart: DateTime
10796 | lastSeenStop: DateTime
10797 | confidences: [Int]
10798 | search: String
10799 | filters: FilterGroup
10800 | ): StixCoreRelationshipConnection
10801 | stixCoreObjectsDistribution(
10802 | relationship_type: [String]
10803 | toTypes: [String]
10804 | field: String!
10805 | startDate: DateTime
10806 | endDate: DateTime
10807 | dateAttribute: String
10808 | operation: StatsOperation!
10809 | limit: Int
10810 | order: String
10811 | types: [String]
10812 | filters: FilterGroup
10813 | search: String
10814 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10815 | stixCoreRelationshipsDistribution(
10816 | field: String!
10817 | operation: StatsOperation!
10818 | startDate: DateTime
10819 | endDate: DateTime
10820 | dateAttribute: String
10821 | isTo: Boolean
10822 | limit: Int
10823 | order: String
10824 | elementWithTargetTypes: [String]
10825 | fromId: [String]
10826 | fromRole: String
10827 | fromTypes: [String]
10828 | toId: [String]
10829 | toRole: String
10830 | toTypes: [String]
10831 | relationship_type: [String]
10832 | confidences: [Int]
10833 | search: String
10834 | filters: FilterGroup
10835 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10836 | opinions_metrics: OpinionsMetrics
10837 | # StixCyberObservable
10838 | x_opencti_score: Int
10839 | x_opencti_description: String
10840 | observable_value: String!
10841 | indicators(first: Int): IndicatorConnection
10842 | # Text
10843 | value: String
10844 | # Technical
10845 | creators: [Creator!]
10846 | toStix: String
10847 | importFiles(
10848 | first: Int
10849 | prefixMimeType: String
10850 | after: ID
10851 | orderBy: FileOrdering
10852 | orderMode: OrderingMode
10853 | search: String
10854 | filters: FilterGroup
10855 | ): FileConnection
10856 | pendingFiles(
10857 | first: Int
10858 | after: ID
10859 | orderBy: FileOrdering
10860 | orderMode: OrderingMode
10861 | search: String
10862 | filters: FilterGroup
10863 | ): FileConnection
10864 | exportFiles(first: Int): FileConnection
10865 | editContext: [EditUserContext!]
10866 | connectors(onlyAlive: Boolean): [Connector]
10867 | jobs(first: Int): [Work]
10868 | }
10869 | input TextAddInput {
10870 | value: String
10871 | file: Upload
10872 | }
10873 | type UserAgent implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
10874 | id: ID! # internal_id
10875 | standard_id: String!
10876 | entity_type: String!
10877 | parent_types: [String]!
10878 | # StixObject
10879 | representative: Representative!
10880 | x_opencti_stix_ids: [StixId]
10881 | is_inferred: Boolean!
10882 | spec_version: String!
10883 | created_at: DateTime!
10884 | updated_at: DateTime!
10885 | draftVersion: DraftVersion
10886 | # inferences
10887 | x_opencti_inferences: [Inference]
10888 | # StixCoreObject
10889 | createdBy: Identity
10890 | numberOfConnectedElement: Int!
10891 | objectMarking: [MarkingDefinition!]
10892 | objectOrganization: [Organization!]
10893 | objectLabel: [Label!]
10894 | externalReferences(first: Int): ExternalReferenceConnection
10895 | containersNumber: Number
10896 | containers(first: Int, entityTypes: [String!]): ContainerConnection
10897 | reports(first: Int): ReportConnection
10898 | notes(first: Int): NoteConnection
10899 | opinions(first: Int): OpinionConnection
10900 | observedData(first: Int): ObservedDataConnection
10901 | groupings(first: Int): GroupingConnection
10902 | cases(first: Int): CaseConnection
10903 | stixCoreRelationships(
10904 | first: Int
10905 | after: ID
10906 | orderBy: StixCoreRelationshipsOrdering
10907 | orderMode: OrderingMode
10908 | fromId: StixRef
10909 | toId: StixRef
10910 | fromTypes: [String]
10911 | toTypes: [String]
10912 | relationship_type: String
10913 | startTimeStart: DateTime
10914 | startTimeStop: DateTime
10915 | stopTimeStart: DateTime
10916 | stopTimeStop: DateTime
10917 | firstSeenStart: DateTime
10918 | firstSeenStop: DateTime
10919 | lastSeenStart: DateTime
10920 | lastSeenStop: DateTime
10921 | confidences: [Int]
10922 | search: String
10923 | filters: FilterGroup
10924 | ): StixCoreRelationshipConnection
10925 | stixCoreObjectsDistribution(
10926 | relationship_type: [String]
10927 | toTypes: [String]
10928 | field: String!
10929 | startDate: DateTime
10930 | endDate: DateTime
10931 | dateAttribute: String
10932 | operation: StatsOperation!
10933 | limit: Int
10934 | order: String
10935 | types: [String]
10936 | filters: FilterGroup
10937 | search: String
10938 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10939 | stixCoreRelationshipsDistribution(
10940 | field: String!
10941 | operation: StatsOperation!
10942 | startDate: DateTime
10943 | endDate: DateTime
10944 | dateAttribute: String
10945 | isTo: Boolean
10946 | limit: Int
10947 | order: String
10948 | elementWithTargetTypes: [String]
10949 | fromId: [String]
10950 | fromRole: String
10951 | fromTypes: [String]
10952 | toId: [String]
10953 | toRole: String
10954 | toTypes: [String]
10955 | relationship_type: [String]
10956 | confidences: [Int]
10957 | search: String
10958 | filters: FilterGroup
10959 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
10960 | opinions_metrics: OpinionsMetrics
10961 | # StixCyberObservable
10962 | x_opencti_score: Int
10963 | x_opencti_description: String
10964 | observable_value: String!
10965 | indicators(first: Int): IndicatorConnection
10966 | # UserAgent
10967 | value: String
10968 | # Technical
10969 | creators: [Creator!]
10970 | toStix: String
10971 | importFiles(
10972 | first: Int
10973 | prefixMimeType: String
10974 | after: ID
10975 | orderBy: FileOrdering
10976 | orderMode: OrderingMode
10977 | search: String
10978 | filters: FilterGroup
10979 | ): FileConnection
10980 | pendingFiles(
10981 | first: Int
10982 | after: ID
10983 | orderBy: FileOrdering
10984 | orderMode: OrderingMode
10985 | search: String
10986 | filters: FilterGroup
10987 | ): FileConnection
10988 | exportFiles(first: Int): FileConnection
10989 | editContext: [EditUserContext!]
10990 | connectors(onlyAlive: Boolean): [Connector]
10991 | jobs(first: Int): [Work]
10992 | }
10993 | input UserAgentAddInput {
10994 | value: String
10995 | file: Upload
10996 | }
10997 | type BankAccount implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
10998 | id: ID! # internal_id
10999 | standard_id: String!
11000 | entity_type: String!
11001 | parent_types: [String]!
11002 | # StixObject
11003 | representative: Representative!
11004 | x_opencti_stix_ids: [StixId]
11005 | is_inferred: Boolean!
11006 | spec_version: String!
11007 | created_at: DateTime!
11008 | updated_at: DateTime!
11009 | draftVersion: DraftVersion
11010 | # inferences
11011 | x_opencti_inferences: [Inference]
11012 | # StixCoreObject
11013 | createdBy: Identity
11014 | numberOfConnectedElement: Int!
11015 | objectMarking: [MarkingDefinition!]
11016 | objectOrganization: [Organization!]
11017 | objectLabel: [Label!]
11018 | externalReferences(first: Int): ExternalReferenceConnection
11019 | containersNumber: Number
11020 | containers(first: Int, entityTypes: [String!]): ContainerConnection
11021 | reports(first: Int): ReportConnection
11022 | notes(first: Int): NoteConnection
11023 | opinions(first: Int): OpinionConnection
11024 | observedData(first: Int): ObservedDataConnection
11025 | groupings(first: Int): GroupingConnection
11026 | cases(first: Int): CaseConnection
11027 | stixCoreRelationships(
11028 | first: Int
11029 | after: ID
11030 | orderBy: StixCoreRelationshipsOrdering
11031 | orderMode: OrderingMode
11032 | fromId: StixRef
11033 | toId: StixRef
11034 | fromTypes: [String]
11035 | toTypes: [String]
11036 | relationship_type: String
11037 | startTimeStart: DateTime
11038 | startTimeStop: DateTime
11039 | stopTimeStart: DateTime
11040 | stopTimeStop: DateTime
11041 | firstSeenStart: DateTime
11042 | firstSeenStop: DateTime
11043 | lastSeenStart: DateTime
11044 | lastSeenStop: DateTime
11045 | confidences: [Int]
11046 | search: String
11047 | filters: FilterGroup
11048 | ): StixCoreRelationshipConnection
11049 | stixCoreObjectsDistribution(
11050 | relationship_type: [String]
11051 | toTypes: [String]
11052 | field: String!
11053 | startDate: DateTime
11054 | endDate: DateTime
11055 | dateAttribute: String
11056 | operation: StatsOperation!
11057 | limit: Int
11058 | order: String
11059 | types: [String]
11060 | filters: FilterGroup
11061 | search: String
11062 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11063 | stixCoreRelationshipsDistribution(
11064 | field: String!
11065 | operation: StatsOperation!
11066 | startDate: DateTime
11067 | endDate: DateTime
11068 | dateAttribute: String
11069 | isTo: Boolean
11070 | limit: Int
11071 | order: String
11072 | fromOrToId: [String]
11073 | elementWithTargetTypes: [String]
11074 | fromId: [String]
11075 | fromRole: String
11076 | fromTypes: [String]
11077 | toId: [String]
11078 | toRole: String
11079 | toTypes: [String]
11080 | relationship_type: [String]
11081 | confidences: [Int]
11082 | search: String
11083 | filters: FilterGroup
11084 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11085 | opinions_metrics: OpinionsMetrics
11086 | # StixCyberObservable
11087 | x_opencti_score: Int
11088 | x_opencti_description: String
11089 | observable_value: String!
11090 | indicators(first: Int): IndicatorConnection
11091 | # BankAccount
11092 | iban: String
11093 | bic: String
11094 | account_number: String
11095 | # Technical
11096 | creators: [Creator!]
11097 | toStix: String
11098 | importFiles(
11099 | first: Int
11100 | prefixMimeType: String
11101 | after: ID
11102 | orderBy: FileOrdering
11103 | orderMode: OrderingMode
11104 | search: String
11105 | filters: FilterGroup
11106 | ): FileConnection
11107 | pendingFiles(
11108 | first: Int
11109 | after: ID
11110 | orderBy: FileOrdering
11111 | orderMode: OrderingMode
11112 | search: String
11113 | filters: FilterGroup
11114 | ): FileConnection
11115 | exportFiles(first: Int): FileConnection
11116 | editContext: [EditUserContext!]
11117 | connectors(onlyAlive: Boolean): [Connector]
11118 | jobs(first: Int): [Work]
11119 | }
11120 | input BankAccountAddInput {
11121 | iban: String
11122 | bic: String
11123 | account_number: String
11124 | file: Upload
11125 | }
11126 | type TrackingNumber implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
11127 | id: ID! # internal_id
11128 | standard_id: String!
11129 | entity_type: String!
11130 | parent_types: [String]!
11131 | # StixObject
11132 | representative: Representative!
11133 | x_opencti_stix_ids: [StixId]
11134 | is_inferred: Boolean!
11135 | spec_version: String!
11136 | created_at: DateTime!
11137 | updated_at: DateTime!
11138 | draftVersion: DraftVersion
11139 | # inferences
11140 | x_opencti_inferences: [Inference]
11141 | # StixCoreObject
11142 | createdBy: Identity
11143 | numberOfConnectedElement: Int!
11144 | objectMarking: [MarkingDefinition!]
11145 | objectOrganization: [Organization!] @auth(for: [KNOWLEDGE_KNUPDATE_KNORGARESTRICT])
11146 | objectLabel: [Label!]
11147 | externalReferences(first: Int): ExternalReferenceConnection
11148 | containersNumber: Number
11149 | containers(first: Int, entityTypes: [String!], elementId: [String]): ContainerConnection
11150 | reports(first: Int): ReportConnection
11151 | notes(first: Int): NoteConnection
11152 | opinions(first: Int): OpinionConnection
11153 | observedData(first: Int): ObservedDataConnection
11154 | groupings(first: Int): GroupingConnection
11155 | cases(first: Int): CaseConnection
11156 | stixCoreRelationships(
11157 | first: Int
11158 | after: ID
11159 | orderBy: StixCoreRelationshipsOrdering
11160 | orderMode: OrderingMode
11161 | fromId: StixRef
11162 | toId: StixRef
11163 | fromTypes: [String]
11164 | toTypes: [String]
11165 | relationship_type: String
11166 | startTimeStart: DateTime
11167 | startTimeStop: DateTime
11168 | stopTimeStart: DateTime
11169 | stopTimeStop: DateTime
11170 | firstSeenStart: DateTime
11171 | firstSeenStop: DateTime
11172 | lastSeenStart: DateTime
11173 | lastSeenStop: DateTime
11174 | confidences: [Int]
11175 | search: String
11176 | filters: FilterGroup
11177 | filterMode: FilterMode
11178 | ): StixCoreRelationshipConnection
11179 | stixCoreObjectsDistribution(
11180 | relationship_type: [String]
11181 | toTypes: [String]
11182 | field: String!
11183 | startDate: DateTime
11184 | endDate: DateTime
11185 | dateAttribute: String
11186 | operation: StatsOperation!
11187 | limit: Int
11188 | order: String
11189 | types: [String]
11190 | filters: FilterGroup
11191 | filterMode: FilterMode
11192 | search: String
11193 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11194 | stixCoreRelationshipsDistribution(
11195 | field: String!
11196 | operation: StatsOperation!
11197 | startDate: DateTime
11198 | endDate: DateTime
11199 | dateAttribute: String
11200 | isTo: Boolean
11201 | limit: Int
11202 | order: String
11203 | elementWithTargetTypes: [String]
11204 | fromId: [String]
11205 | fromRole: String
11206 | fromTypes: [String]
11207 | toId: [String]
11208 | toRole: String
11209 | toTypes: [String]
11210 | relationship_type: [String]
11211 | confidences: [Int]
11212 | search: String
11213 | filters: FilterGroup
11214 | filterMode: FilterMode
11215 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11216 | opinions_metrics: OpinionsMetrics
11217 | # StixCyberObservable
11218 | x_opencti_score: Int
11219 | x_opencti_description: String
11220 | observable_value: String!
11221 | indicators(first: Int): IndicatorConnection
11222 | # TrackingNumber
11223 | value: String
11224 | # Technical
11225 | creators: [Creator!]
11226 | toStix: String
11227 | importFiles(
11228 | first: Int
11229 | prefixMimeType: String
11230 | after: ID
11231 | orderBy: FileOrdering
11232 | orderMode: OrderingMode
11233 | search: String
11234 | filters: FilterGroup
11235 | ): FileConnection
11236 | pendingFiles(
11237 | first: Int
11238 | after: ID
11239 | orderBy: FileOrdering
11240 | orderMode: OrderingMode
11241 | search: String
11242 | filters: FilterGroup
11243 | ): FileConnection
11244 | exportFiles(first: Int): FileConnection
11245 | editContext: [EditUserContext!]
11246 | connectors(onlyAlive: Boolean): [Connector]
11247 | jobs(first: Int): [Work]
11248 | }
11249 | input TrackingNumberAddInput {
11250 | value: String
11251 | file: Upload
11252 | }
11253 | type Credential implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
11254 | id: ID! # internal_id
11255 | standard_id: String!
11256 | entity_type: String!
11257 | parent_types: [String]!
11258 | # StixObject
11259 | representative: Representative!
11260 | x_opencti_stix_ids: [StixId]
11261 | is_inferred: Boolean!
11262 | spec_version: String!
11263 | created_at: DateTime!
11264 | updated_at: DateTime!
11265 | draftVersion: DraftVersion
11266 | # inferences
11267 | x_opencti_inferences: [Inference]
11268 | # StixCoreObject
11269 | createdBy: Identity
11270 | numberOfConnectedElement: Int!
11271 | objectMarking: [MarkingDefinition!]
11272 | objectOrganization: [Organization!] @auth(for: [KNOWLEDGE_KNUPDATE_KNORGARESTRICT])
11273 | objectLabel: [Label!]
11274 | externalReferences(first: Int): ExternalReferenceConnection
11275 | containersNumber: Number
11276 | containers(first: Int, entityTypes: [String!], elementId: [String]): ContainerConnection
11277 | reports(first: Int): ReportConnection
11278 | notes(first: Int): NoteConnection
11279 | opinions(first: Int): OpinionConnection
11280 | observedData(first: Int): ObservedDataConnection
11281 | groupings(first: Int): GroupingConnection
11282 | cases(first: Int): CaseConnection
11283 | stixCoreRelationships(
11284 | first: Int
11285 | after: ID
11286 | orderBy: StixCoreRelationshipsOrdering
11287 | orderMode: OrderingMode
11288 | fromId: StixRef
11289 | toId: StixRef
11290 | fromTypes: [String]
11291 | toTypes: [String]
11292 | relationship_type: String
11293 | startTimeStart: DateTime
11294 | startTimeStop: DateTime
11295 | stopTimeStart: DateTime
11296 | stopTimeStop: DateTime
11297 | firstSeenStart: DateTime
11298 | firstSeenStop: DateTime
11299 | lastSeenStart: DateTime
11300 | lastSeenStop: DateTime
11301 | confidences: [Int]
11302 | search: String
11303 | filters: FilterGroup
11304 | filterMode: FilterMode
11305 | ): StixCoreRelationshipConnection
11306 | stixCoreObjectsDistribution(
11307 | relationship_type: [String]
11308 | toTypes: [String]
11309 | field: String!
11310 | startDate: DateTime
11311 | endDate: DateTime
11312 | dateAttribute: String
11313 | operation: StatsOperation!
11314 | limit: Int
11315 | order: String
11316 | types: [String]
11317 | filters: FilterGroup
11318 | filterMode: FilterMode
11319 | search: String
11320 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11321 | stixCoreRelationshipsDistribution(
11322 | field: String!
11323 | operation: StatsOperation!
11324 | startDate: DateTime
11325 | endDate: DateTime
11326 | dateAttribute: String
11327 | isTo: Boolean
11328 | limit: Int
11329 | order: String
11330 | elementWithTargetTypes: [String]
11331 | fromId: [String]
11332 | fromRole: String
11333 | fromTypes: [String]
11334 | toId: [String]
11335 | toRole: String
11336 | toTypes: [String]
11337 | relationship_type: [String]
11338 | confidences: [Int]
11339 | search: String
11340 | filters: FilterGroup
11341 | filterMode: FilterMode
11342 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11343 | opinions_metrics: OpinionsMetrics
11344 | # StixCyberObservable
11345 | x_opencti_score: Int
11346 | x_opencti_description: String
11347 | observable_value: String!
11348 | indicators(first: Int): IndicatorConnection
11349 | # Credential
11350 | value: String
11351 | # Technical
11352 | creators: [Creator!]
11353 | toStix: String
11354 | importFiles(
11355 | first: Int
11356 | prefixMimeType: String
11357 | after: ID
11358 | orderBy: FileOrdering
11359 | orderMode: OrderingMode
11360 | search: String
11361 | filters: FilterGroup
11362 | ): FileConnection
11363 | pendingFiles(
11364 | first: Int
11365 | after: ID
11366 | orderBy: FileOrdering
11367 | orderMode: OrderingMode
11368 | search: String
11369 | filters: FilterGroup
11370 | ): FileConnection
11371 | exportFiles(first: Int): FileConnection
11372 | editContext: [EditUserContext!]
11373 | connectors(onlyAlive: Boolean): [Connector]
11374 | jobs(first: Int): [Work]
11375 | }
11376 | input CredentialAddInput {
11377 | value: String
11378 | file: Upload
11379 | }
11380 | type PhoneNumber implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
11381 | id: ID! # internal_id
11382 | standard_id: String!
11383 | entity_type: String!
11384 | parent_types: [String]!
11385 | # StixObject
11386 | representative: Representative!
11387 | x_opencti_stix_ids: [StixId]
11388 | is_inferred: Boolean!
11389 | spec_version: String!
11390 | created_at: DateTime!
11391 | updated_at: DateTime!
11392 | draftVersion: DraftVersion
11393 | # inferences
11394 | x_opencti_inferences: [Inference]
11395 | # StixCoreObject
11396 | createdBy: Identity
11397 | numberOfConnectedElement: Int!
11398 | objectMarking: [MarkingDefinition!]
11399 | objectOrganization: [Organization!]
11400 | objectLabel: [Label!]
11401 | externalReferences(first: Int): ExternalReferenceConnection
11402 | containersNumber: Number
11403 | containers(first: Int, entityTypes: [String!]): ContainerConnection
11404 | reports(first: Int): ReportConnection
11405 | notes(first: Int): NoteConnection
11406 | opinions(first: Int): OpinionConnection
11407 | observedData(first: Int): ObservedDataConnection
11408 | groupings(first: Int): GroupingConnection
11409 | cases(first: Int): CaseConnection
11410 | stixCoreRelationships(
11411 | first: Int
11412 | after: ID
11413 | orderBy: StixCoreRelationshipsOrdering
11414 | orderMode: OrderingMode
11415 | fromId: StixRef
11416 | toId: StixRef
11417 | fromTypes: [String]
11418 | toTypes: [String]
11419 | relationship_type: String
11420 | startTimeStart: DateTime
11421 | startTimeStop: DateTime
11422 | stopTimeStart: DateTime
11423 | stopTimeStop: DateTime
11424 | firstSeenStart: DateTime
11425 | firstSeenStop: DateTime
11426 | lastSeenStart: DateTime
11427 | lastSeenStop: DateTime
11428 | confidences: [Int]
11429 | search: String
11430 | filters: FilterGroup
11431 | ): StixCoreRelationshipConnection
11432 | stixCoreObjectsDistribution(
11433 | relationship_type: [String]
11434 | toTypes: [String]
11435 | field: String!
11436 | startDate: DateTime
11437 | endDate: DateTime
11438 | dateAttribute: String
11439 | operation: StatsOperation!
11440 | limit: Int
11441 | order: String
11442 | types: [String]
11443 | filters: FilterGroup
11444 | search: String
11445 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11446 | stixCoreRelationshipsDistribution(
11447 | field: String!
11448 | operation: StatsOperation!
11449 | startDate: DateTime
11450 | endDate: DateTime
11451 | dateAttribute: String
11452 | isTo: Boolean
11453 | limit: Int
11454 | order: String
11455 | elementWithTargetTypes: [String]
11456 | fromId: [String]
11457 | fromRole: String
11458 | fromTypes: [String]
11459 | toId: [String]
11460 | toRole: String
11461 | toTypes: [String]
11462 | relationship_type: [String]
11463 | confidences: [Int]
11464 | search: String
11465 | filters: FilterGroup
11466 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11467 | opinions_metrics: OpinionsMetrics
11468 | # StixCyberObservable
11469 | x_opencti_score: Int
11470 | x_opencti_description: String
11471 | observable_value: String!
11472 | indicators(first: Int): IndicatorConnection
11473 | # PhoneNumber
11474 | value: String
11475 | # Technical
11476 | creators: [Creator!]
11477 | toStix: String
11478 | importFiles(
11479 | first: Int
11480 | prefixMimeType: String
11481 | after: ID
11482 | orderBy: FileOrdering
11483 | orderMode: OrderingMode
11484 | search: String
11485 | filters: FilterGroup
11486 | ): FileConnection
11487 | pendingFiles(
11488 | first: Int
11489 | after: ID
11490 | orderBy: FileOrdering
11491 | orderMode: OrderingMode
11492 | search: String
11493 | filters: FilterGroup
11494 | ): FileConnection
11495 | exportFiles(first: Int): FileConnection
11496 | editContext: [EditUserContext!]
11497 | connectors(onlyAlive: Boolean): [Connector]
11498 | jobs(first: Int): [Work]
11499 | }
11500 | input PhoneNumberAddInput {
11501 | value: String
11502 | file: Upload
11503 | }
11504 | type PaymentCard implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
11505 | id: ID! # internal_id
11506 | standard_id: String!
11507 | entity_type: String!
11508 | parent_types: [String]!
11509 | # StixObject
11510 | representative: Representative!
11511 | x_opencti_stix_ids: [StixId]
11512 | is_inferred: Boolean!
11513 | spec_version: String!
11514 | created_at: DateTime!
11515 | updated_at: DateTime!
11516 | draftVersion: DraftVersion
11517 | # inferences
11518 | x_opencti_inferences: [Inference]
11519 | # StixCoreObject
11520 | createdBy: Identity
11521 | numberOfConnectedElement: Int!
11522 | objectMarking: [MarkingDefinition!]
11523 | objectOrganization: [Organization!]
11524 | objectLabel: [Label!]
11525 | externalReferences(first: Int): ExternalReferenceConnection
11526 | containersNumber: Number
11527 | containers(first: Int, entityTypes: [String!]): ContainerConnection
11528 | reports(first: Int): ReportConnection
11529 | notes(first: Int): NoteConnection
11530 | opinions(first: Int): OpinionConnection
11531 | observedData(first: Int): ObservedDataConnection
11532 | groupings(first: Int): GroupingConnection
11533 | cases(first: Int): CaseConnection
11534 | stixCoreRelationships(
11535 | first: Int
11536 | after: ID
11537 | orderBy: StixCoreRelationshipsOrdering
11538 | orderMode: OrderingMode
11539 | fromId: StixRef
11540 | toId: StixRef
11541 | fromTypes: [String]
11542 | toTypes: [String]
11543 | relationship_type: String
11544 | startTimeStart: DateTime
11545 | startTimeStop: DateTime
11546 | stopTimeStart: DateTime
11547 | stopTimeStop: DateTime
11548 | firstSeenStart: DateTime
11549 | firstSeenStop: DateTime
11550 | lastSeenStart: DateTime
11551 | lastSeenStop: DateTime
11552 | confidences: [Int]
11553 | search: String
11554 | filters: FilterGroup
11555 | ): StixCoreRelationshipConnection
11556 | stixCoreObjectsDistribution(
11557 | relationship_type: [String]
11558 | toTypes: [String]
11559 | field: String!
11560 | startDate: DateTime
11561 | endDate: DateTime
11562 | dateAttribute: String
11563 | operation: StatsOperation!
11564 | limit: Int
11565 | order: String
11566 | types: [String]
11567 | filters: FilterGroup
11568 | search: String
11569 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11570 | stixCoreRelationshipsDistribution(
11571 | field: String!
11572 | operation: StatsOperation!
11573 | startDate: DateTime
11574 | endDate: DateTime
11575 | dateAttribute: String
11576 | isTo: Boolean
11577 | limit: Int
11578 | order: String
11579 | elementWithTargetTypes: [String]
11580 | fromId: [String]
11581 | fromRole: String
11582 | fromTypes: [String]
11583 | toId: [String]
11584 | toRole: String
11585 | toTypes: [String]
11586 | relationship_type: [String]
11587 | confidences: [Int]
11588 | search: String
11589 | filters: FilterGroup
11590 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11591 | opinions_metrics: OpinionsMetrics
11592 | # StixCyberObservable
11593 | x_opencti_score: Int
11594 | x_opencti_description: String
11595 | observable_value: String!
11596 | indicators(first: Int): IndicatorConnection
11597 | # CreditCard
11598 | card_number: String
11599 | expiration_date: DateTime
11600 | cvv: Int
11601 | holder_name: String
11602 | # Technical
11603 | creators: [Creator!]
11604 | toStix: String
11605 | importFiles(
11606 | first: Int
11607 | prefixMimeType: String
11608 | after: ID
11609 | orderBy: FileOrdering
11610 | orderMode: OrderingMode
11611 | search: String
11612 | filters: FilterGroup
11613 | ): FileConnection
11614 | pendingFiles(
11615 | first: Int
11616 | after: ID
11617 | orderBy: FileOrdering
11618 | orderMode: OrderingMode
11619 | search: String
11620 | filters: FilterGroup
11621 | ): FileConnection
11622 | exportFiles(first: Int): FileConnection
11623 | editContext: [EditUserContext!]
11624 | connectors(onlyAlive: Boolean): [Connector]
11625 | jobs(first: Int): [Work]
11626 | }
11627 | input PaymentCardAddInput {
11628 | card_number: String!
11629 | expiration_date: DateTime
11630 | cvv: Int
11631 | holder_name: String
11632 | file: Upload
11633 | }
11634 | type MediaContent implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
11635 | id: ID! # internal_id
11636 | standard_id: String!
11637 | entity_type: String!
11638 | parent_types: [String]!
11639 | # StixObject
11640 | representative: Representative!
11641 | x_opencti_stix_ids: [StixId]
11642 | is_inferred: Boolean!
11643 | spec_version: String!
11644 | created_at: DateTime!
11645 | updated_at: DateTime!
11646 | draftVersion: DraftVersion
11647 | # inferences
11648 | x_opencti_inferences: [Inference]
11649 | # StixCoreObject
11650 | createdBy: Identity
11651 | numberOfConnectedElement: Int!
11652 | objectMarking: [MarkingDefinition!]
11653 | objectLabel: [Label!]
11654 | objectOrganization: [Organization!]
11655 | externalReferences(first: Int): ExternalReferenceConnection
11656 | containersNumber: Number
11657 | containers(first: Int, entityTypes: [String!]): ContainerConnection
11658 | reports(first: Int): ReportConnection
11659 | notes(first: Int): NoteConnection
11660 | opinions(first: Int): OpinionConnection
11661 | observedData(first: Int): ObservedDataConnection
11662 | groupings(first: Int): GroupingConnection
11663 | cases(first: Int): CaseConnection
11664 | stixCoreRelationships(
11665 | first: Int
11666 | after: ID
11667 | orderBy: StixCoreRelationshipsOrdering
11668 | orderMode: OrderingMode
11669 | fromId: StixRef
11670 | toId: StixRef
11671 | fromTypes: [String]
11672 | toTypes: [String]
11673 | relationship_type: String
11674 | startTimeStart: DateTime
11675 | startTimeStop: DateTime
11676 | stopTimeStart: DateTime
11677 | stopTimeStop: DateTime
11678 | firstSeenStart: DateTime
11679 | firstSeenStop: DateTime
11680 | lastSeenStart: DateTime
11681 | lastSeenStop: DateTime
11682 | confidences: [Int]
11683 | search: String
11684 | filters: FilterGroup
11685 | ): StixCoreRelationshipConnection
11686 | stixCoreObjectsDistribution(
11687 | relationship_type: [String]
11688 | toTypes: [String]
11689 | field: String!
11690 | startDate: DateTime
11691 | endDate: DateTime
11692 | dateAttribute: String
11693 | operation: StatsOperation!
11694 | limit: Int
11695 | order: String
11696 | types: [String]
11697 | filters: FilterGroup
11698 | search: String
11699 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11700 | stixCoreRelationshipsDistribution(
11701 | field: String!
11702 | operation: StatsOperation!
11703 | startDate: DateTime
11704 | endDate: DateTime
11705 | dateAttribute: String
11706 | isTo: Boolean
11707 | limit: Int
11708 | order: String
11709 | elementWithTargetTypes: [String]
11710 | fromId: [String]
11711 | fromRole: String
11712 | fromTypes: [String]
11713 | toId: [String]
11714 | toRole: String
11715 | toTypes: [String]
11716 | relationship_type: [String]
11717 | confidences: [Int]
11718 | search: String
11719 | filters: FilterGroup
11720 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11721 | opinions_metrics: OpinionsMetrics
11722 | # StixCyberObservable
11723 | x_opencti_score: Int
11724 | x_opencti_description: String
11725 | observable_value: String!
11726 | indicators(first: Int): IndicatorConnection
11727 | # MediaContent
11728 | title: String
11729 | description: String
11730 | content: String
11731 | media_category: String
11732 | url: String
11733 | publication_date: DateTime
11734 | # Technical
11735 | creators: [Creator!]
11736 | toStix: String
11737 | importFiles(
11738 | first: Int
11739 | prefixMimeType: String
11740 | after: ID
11741 | orderBy: FileOrdering
11742 | orderMode: OrderingMode
11743 | search: String
11744 | filters: FilterGroup
11745 | ): FileConnection
11746 | pendingFiles(
11747 | first: Int
11748 | after: ID
11749 | orderBy: FileOrdering
11750 | orderMode: OrderingMode
11751 | search: String
11752 | filters: FilterGroup
11753 | ): FileConnection
11754 | exportFiles(first: Int): FileConnection
11755 | editContext: [EditUserContext!]
11756 | connectors(onlyAlive: Boolean): [Connector]
11757 | jobs(first: Int): [Work]
11758 | }
11759 | input MediaContentAddInput {
11760 | title: String
11761 | content: String
11762 | media_category: String
11763 | url: String!
11764 | publication_date: DateTime
11765 | file: Upload
11766 | }
11767 | type Persona implements BasicObject & StixObject & StixCoreObject & StixCyberObservable {
11768 | id: ID! # internal_id
11769 | standard_id: String!
11770 | entity_type: String!
11771 | parent_types: [String]!
11772 | # StixObject
11773 | representative: Representative!
11774 | x_opencti_stix_ids: [StixId]
11775 | is_inferred: Boolean!
11776 | spec_version: String!
11777 | created_at: DateTime!
11778 | updated_at: DateTime!
11779 | draftVersion: DraftVersion
11780 | # inferences
11781 | x_opencti_inferences: [Inference]
11782 | # StixCoreObject
11783 | createdBy: Identity
11784 | numberOfConnectedElement: Int!
11785 | objectMarking: [MarkingDefinition!]
11786 | objectLabel: [Label!]
11787 | objectOrganization: [Organization!]
11788 | externalReferences(first: Int): ExternalReferenceConnection
11789 | containersNumber: Number
11790 | containers(first: Int, entityTypes: [String!]): ContainerConnection
11791 | reports(first: Int): ReportConnection
11792 | notes(first: Int): NoteConnection
11793 | opinions(first: Int): OpinionConnection
11794 | observedData(first: Int): ObservedDataConnection
11795 | groupings(first: Int): GroupingConnection
11796 | cases(first: Int): CaseConnection
11797 | stixCoreRelationships(
11798 | first: Int
11799 | after: ID
11800 | orderBy: StixCoreRelationshipsOrdering
11801 | orderMode: OrderingMode
11802 | fromId: StixRef
11803 | toId: StixRef
11804 | fromTypes: [String]
11805 | toTypes: [String]
11806 | relationship_type: String
11807 | startTimeStart: DateTime
11808 | startTimeStop: DateTime
11809 | stopTimeStart: DateTime
11810 | stopTimeStop: DateTime
11811 | firstSeenStart: DateTime
11812 | firstSeenStop: DateTime
11813 | lastSeenStart: DateTime
11814 | lastSeenStop: DateTime
11815 | confidences: [Int]
11816 | search: String
11817 | filters: FilterGroup
11818 | ): StixCoreRelationshipConnection
11819 | stixCoreObjectsDistribution(
11820 | relationship_type: [String]
11821 | toTypes: [String]
11822 | field: String!
11823 | startDate: DateTime
11824 | endDate: DateTime
11825 | dateAttribute: String
11826 | operation: StatsOperation!
11827 | limit: Int
11828 | order: String
11829 | types: [String]
11830 | filters: FilterGroup
11831 | search: String
11832 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11833 | stixCoreRelationshipsDistribution(
11834 | field: String!
11835 | operation: StatsOperation!
11836 | startDate: DateTime
11837 | endDate: DateTime
11838 | dateAttribute: String
11839 | isTo: Boolean
11840 | limit: Int
11841 | order: String
11842 | elementWithTargetTypes: [String]
11843 | fromId: [String]
11844 | fromRole: String
11845 | fromTypes: [String]
11846 | toId: [String]
11847 | toRole: String
11848 | toTypes: [String]
11849 | relationship_type: [String]
11850 | confidences: [Int]
11851 | search: String
11852 | filters: FilterGroup
11853 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
11854 | opinions_metrics: OpinionsMetrics
11855 | # StixCyberObservable
11856 | x_opencti_score: Int
11857 | x_opencti_description: String
11858 | observable_value: String!
11859 | indicators(first: Int): IndicatorConnection
11860 | # Persona
11861 | persona_name: String!
11862 | persona_type: String!
11863 | # Technical
11864 | creators: [Creator!]
11865 | toStix: String
11866 | importFiles(
11867 | first: Int
11868 | prefixMimeType: String
11869 | after: ID
11870 | orderBy: FileOrdering
11871 | orderMode: OrderingMode
11872 | search: String
11873 | filters: FilterGroup
11874 | ): FileConnection
11875 | pendingFiles(
11876 | first: Int
11877 | after: ID
11878 | orderBy: FileOrdering
11879 | orderMode: OrderingMode
11880 | search: String
11881 | filters: FilterGroup
11882 | ): FileConnection
11883 | exportFiles(first: Int): FileConnection
11884 | editContext: [EditUserContext!]
11885 | connectors(onlyAlive: Boolean): [Connector]
11886 | jobs(first: Int): [Work]
11887 | }
11888 | input PersonaAddInput {
11889 | persona_name: String! @constraint(minLength: 2, format: "not-blank")
11890 | persona_type: String!
11891 | }
11892 | ###### RELATIONSHIPS
11893 |
11894 | interface BasicRelationship {
11895 | id: ID! # internal_id
11896 | standard_id: String!
11897 | entity_type: String!
11898 | parent_types: [String]!
11899 | fromRole: String
11900 | toRole: String
11901 | created_at: DateTime!
11902 | updated_at: DateTime!
11903 | # Technical
11904 | creators: [Creator!]
11905 | }
11906 |
11907 | ######## INTERNAL RELATIONSHIPS
11908 |
11909 | type InternalRelationship implements BasicRelationship {
11910 | # BasicRelationship
11911 | id: ID! # internal_id
11912 | standard_id: String!
11913 | entity_type: String!
11914 | parent_types: [String]!
11915 | fromRole: String
11916 | toRole: String
11917 | created_at: DateTime!
11918 | updated_at: DateTime!
11919 | # InternalRelationship
11920 | from: InternalObject
11921 | to: InternalObject
11922 | # Technical
11923 | creators: [Creator!]
11924 | }
11925 | input InternalRelationshipAddInput {
11926 | relationship_type: String! # Will be checked by code
11927 | fromId: ID
11928 | toId: ID
11929 | }
11930 |
11931 | ######## STIX RELATIONSHIPS
11932 | enum StixObjectOrStixRelationshipsOrdering {
11933 | name
11934 | entity_type
11935 | created_at
11936 | updated_at
11937 | createdBy
11938 | objectMarking
11939 | objectLabel
11940 | observable_value
11941 | start_time
11942 | created
11943 | modified
11944 | relationship_type
11945 | creator
11946 | _score
11947 | }
11948 | type StixObjectOrStixRelationshipConnection {
11949 | pageInfo: PageInfo!
11950 | edges: [StixObjectOrStixRelationshipEdge]
11951 | }
11952 | type StixObjectOrStixRelationshipRefConnection {
11953 | pageInfo: PageInfo!
11954 | edges: [StixObjectOrStixRelationshipRefEdge]
11955 | }
11956 | type StixObjectOrStixRelationshipEdge {
11957 | cursor: String!
11958 | node: StixObjectOrStixRelationship!
11959 | }
11960 | type StixObjectOrStixRelationshipRefEdge {
11961 | cursor: String!
11962 | types: [String]!
11963 | node: StixObjectOrStixRelationship!
11964 | }
11965 | union StixObjectOrStixRelationshipOrCreator =
11966 | MarkingDefinition
11967 | | Label
11968 | | KillChainPhase
11969 | | ExternalReference
11970 | | AttackPattern
11971 | | Campaign
11972 | | Channel
11973 | | Event
11974 | | Narrative
11975 | | Note
11976 | | ObservedData
11977 | | Opinion
11978 | | Report
11979 | | Grouping
11980 | | CourseOfAction
11981 | | Individual
11982 | | Organization
11983 | | Sector
11984 | | System
11985 | | Indicator
11986 | | Infrastructure
11987 | | IntrusionSet
11988 | | Language
11989 | | City
11990 | | AdministrativeArea
11991 | | Country
11992 | | Region
11993 | | Position
11994 | | Malware
11995 | | MalwareAnalysis
11996 | | ThreatActorGroup
11997 | | ThreatActorIndividual
11998 | | Tool
11999 | | Vulnerability
12000 | | Incident
12001 | | AutonomousSystem
12002 | | Directory
12003 | | DomainName
12004 | | EmailAddr
12005 | | EmailMessage
12006 | | EmailMimePartType
12007 | | Artifact
12008 | | StixFile
12009 | | X509Certificate
12010 | | IPv4Addr
12011 | | IPv6Addr
12012 | | MacAddr
12013 | | Mutex
12014 | | NetworkTraffic
12015 | | Process
12016 | | Software
12017 | | Url
12018 | | UserAccount
12019 | | WindowsRegistryKey
12020 | | WindowsRegistryValueType
12021 | | CryptographicKey
12022 | | CryptocurrencyWallet
12023 | | Hostname
12024 | | Text
12025 | | UserAgent
12026 | | BankAccount
12027 | | Credential
12028 | | TrackingNumber
12029 | | PhoneNumber
12030 | | PaymentCard
12031 | | MediaContent
12032 | | Persona
12033 | | StixCoreRelationship
12034 | | StixSightingRelationship
12035 | | StixRefRelationship
12036 | | Task
12037 | | DataComponent
12038 | | DataSource
12039 | | CaseIncident
12040 | | CaseRfi
12041 | | CaseRft
12042 | | Feedback
12043 | | CaseTemplate
12044 | | EntitySetting
12045 | | ManagerConfiguration
12046 | | Creator
12047 | | Group
12048 | | Workspace
12049 | | CsvMapper
12050 | | Status
12051 | | PublicDashboard
12052 | union StixObjectOrStixRelationship =
12053 | MarkingDefinition
12054 | | Label
12055 | | KillChainPhase
12056 | | ExternalReference
12057 | | AttackPattern
12058 | | Campaign
12059 | | Channel
12060 | | Event
12061 | | Narrative
12062 | | Note
12063 | | ObservedData
12064 | | Opinion
12065 | | Report
12066 | | Grouping
12067 | | CourseOfAction
12068 | | Individual
12069 | | Organization
12070 | | Sector
12071 | | System
12072 | | Indicator
12073 | | Infrastructure
12074 | | IntrusionSet
12075 | | Language
12076 | | City
12077 | | AdministrativeArea
12078 | | Country
12079 | | Region
12080 | | Position
12081 | | Malware
12082 | | MalwareAnalysis
12083 | | ThreatActorGroup
12084 | | ThreatActorIndividual
12085 | | Tool
12086 | | Vulnerability
12087 | | Incident
12088 | | AutonomousSystem
12089 | | Directory
12090 | | DomainName
12091 | | EmailAddr
12092 | | EmailMessage
12093 | | EmailMimePartType
12094 | | Artifact
12095 | | StixFile
12096 | | X509Certificate
12097 | | IPv4Addr
12098 | | IPv6Addr
12099 | | MacAddr
12100 | | Mutex
12101 | | NetworkTraffic
12102 | | Process
12103 | | Software
12104 | | Url
12105 | | UserAccount
12106 | | WindowsRegistryKey
12107 | | WindowsRegistryValueType
12108 | | CryptographicKey
12109 | | CryptocurrencyWallet
12110 | | Hostname
12111 | | Text
12112 | | UserAgent
12113 | | BankAccount
12114 | | Credential
12115 | | TrackingNumber
12116 | | PhoneNumber
12117 | | PaymentCard
12118 | | MediaContent
12119 | | Persona
12120 | | StixCoreRelationship
12121 | | StixSightingRelationship
12122 | | StixRefRelationship
12123 | | DataComponent
12124 | | DataSource
12125 | | CaseIncident
12126 | | CaseRfi
12127 | | CaseRft
12128 | | Feedback
12129 | | CaseTemplate
12130 | | Task
12131 | | EntitySetting
12132 | | ManagerConfiguration
12133 | | Workspace
12134 | | CsvMapper
12135 | | PublicDashboard
12136 | union StixCoreObjectOrStixCoreRelationship =
12137 | #### Stix Core Objects
12138 | ## Stix Domain Objects
12139 | AttackPattern
12140 | | Campaign
12141 | | Channel
12142 | | Event
12143 | | Note
12144 | | ObservedData
12145 | | Opinion
12146 | | Report
12147 | | Grouping
12148 | | CourseOfAction
12149 | | Individual
12150 | | Organization
12151 | | Sector
12152 | | Indicator
12153 | | Infrastructure
12154 | | IntrusionSet
12155 | | Language
12156 | | City
12157 | | AdministrativeArea
12158 | | Country
12159 | | Region
12160 | | Position
12161 | | Malware
12162 | | MalwareAnalysis
12163 | | Narrative
12164 | | ThreatActorGroup
12165 | | ThreatActorIndividual
12166 | | Tool
12167 | | Vulnerability
12168 | | Incident ## Six Cyber Observables
12169 | | AutonomousSystem
12170 | | Directory
12171 | | DomainName
12172 | | EmailAddr
12173 | | EmailMessage
12174 | | EmailMimePartType
12175 | | Artifact
12176 | | StixFile
12177 | | X509Certificate
12178 | | IPv4Addr
12179 | | IPv6Addr
12180 | | MacAddr
12181 | | Mutex
12182 | | NetworkTraffic
12183 | | Process
12184 | | Software
12185 | | Url
12186 | | UserAccount
12187 | | WindowsRegistryKey
12188 | | WindowsRegistryValueType
12189 | | CryptographicKey
12190 | | CryptocurrencyWallet
12191 | | Hostname
12192 | | Text
12193 | | UserAgent
12194 | | BankAccount
12195 | | Credential
12196 | | TrackingNumber
12197 | | PhoneNumber
12198 | | PaymentCard
12199 | | MediaContent
12200 | | Persona
12201 | | StixCoreRelationship
12202 | | DataComponent
12203 | | DataSource
12204 | | CaseIncident
12205 | | CaseRfi
12206 | | CaseRft
12207 | | Feedback
12208 | | CaseTemplate
12209 | | Task
12210 | | EntitySetting
12211 | | ManagerConfiguration
12212 | | Workspace
12213 | | PublicDashboard
12214 |
12215 | enum StixRelationshipsOrdering {
12216 | entity_type
12217 | relationship_type
12218 | confidence
12219 | start_time
12220 | stop_time
12221 | created
12222 | modified
12223 | created_at
12224 | updated_at
12225 | objectMarking
12226 | objectLabel
12227 | killChainPhase
12228 | toName
12229 | toValidFrom
12230 | toValidUntil
12231 | toObservableValue
12232 | toPatternType
12233 | x_opencti_workflow_id
12234 | createdBy
12235 | creator
12236 | _score
12237 | }
12238 | type StixRelationshipConnection {
12239 | pageInfo: PageInfo!
12240 | edges: [StixRelationshipEdge]
12241 | }
12242 | type StixRelationshipEdge {
12243 | cursor: String!
12244 | node: StixRelationship!
12245 | }
12246 | interface StixRelationship {
12247 | # BasicRelationship
12248 | id: ID! # internal_id
12249 | standard_id: String!
12250 | entity_type: String!
12251 | parent_types: [String]!
12252 | fromRole: String
12253 | toRole: String
12254 | created_at: DateTime!
12255 | updated_at: DateTime!
12256 | # StixRelationship
12257 | representative: Representative!
12258 | x_opencti_stix_ids: [StixId]
12259 | is_inferred: Boolean!
12260 | from: StixObjectOrStixRelationshipOrCreator
12261 | to: StixObjectOrStixRelationshipOrCreator
12262 | x_opencti_inferences: [Inference]
12263 | spec_version: String!
12264 | created: DateTime
12265 | modified: DateTime
12266 | confidence: Int
12267 | relationship_type: String!
12268 | createdBy: Identity
12269 | objectMarking: [MarkingDefinition!]
12270 | toStix: String
12271 | draftVersion: DraftVersion
12272 | # Technical
12273 | creators: [Creator!]
12274 | }
12275 | type StixRelationshipSchema {
12276 | key: String!
12277 | values: [String!]!
12278 | }
12279 |
12280 | type StixRelationshipRefSchemaValue {
12281 | name: String!
12282 | toTypes: [String!]!
12283 | }
12284 | type StixRelationshipRefSchema {
12285 | key: String!
12286 | values: [StixRelationshipRefSchemaValue!]!
12287 | }
12288 |
12289 | ############## StixCoreRelationships
12290 | enum StixCoreRelationshipsOrdering {
12291 | entity_type
12292 | relationship_type
12293 | confidence
12294 | start_time
12295 | stop_time
12296 | created
12297 | modified
12298 | created_at
12299 | updated_at
12300 | objectMarking
12301 | objectLabel
12302 | killChainPhase
12303 | toName
12304 | toValidFrom
12305 | toValidUntil
12306 | toObservableValue
12307 | toPatternType
12308 | x_opencti_workflow_id
12309 | createdBy
12310 | creator
12311 | _score
12312 | }
12313 | type StixCoreRelationshipConnection {
12314 | pageInfo: PageInfo!
12315 | edges: [StixCoreRelationshipEdge!]!
12316 | }
12317 | type StixCoreRelationshipEdge {
12318 | cursor: String!
12319 | node: StixCoreRelationship!
12320 | }
12321 | type StixCoreRelationship implements BasicRelationship & StixRelationship {
12322 | # BasicRelationship
12323 | id: ID! # internal_id
12324 | standard_id: String!
12325 | entity_type: String!
12326 | parent_types: [String]!
12327 | fromRole: String
12328 | toRole: String
12329 | created_at: DateTime!
12330 | updated_at: DateTime!
12331 | # StixRelationship
12332 | representative: Representative!
12333 | x_opencti_stix_ids: [StixId]
12334 | is_inferred: Boolean!
12335 | from: StixObjectOrStixRelationshipOrCreator
12336 | fromId: String!
12337 | fromType: String!
12338 | to: StixObjectOrStixRelationshipOrCreator
12339 | toId: String!
12340 | toType: String!
12341 | x_opencti_inferences: [Inference]
12342 | spec_version: String!
12343 | created: DateTime
12344 | modified: DateTime
12345 | confidence: Int
12346 | relationship_type: String!
12347 | createdBy: Identity
12348 | objectMarking: [MarkingDefinition!]
12349 | draftVersion: DraftVersion
12350 | # StixCoreRelationship
12351 | description: String
12352 | start_time: DateTime
12353 | stop_time: DateTime
12354 | revoked: Boolean!
12355 | lang: String
12356 | objectLabel: [Label!]
12357 | objectOrganization: [Organization!]
12358 | externalReferences(first: Int): ExternalReferenceConnection
12359 | containersNumber: Number
12360 | containers(first: Int, entityTypes: [String!]): ContainerConnection
12361 | reports(first: Int): ReportConnection
12362 | notes(first: Int): NoteConnection
12363 | opinions(first: Int): OpinionConnection
12364 | groupings(first: Int): GroupingConnection
12365 | cases(first: Int): CaseConnection
12366 | stixCoreRelationships(
12367 | first: Int
12368 | after: ID
12369 | orderBy: StixCoreRelationshipsOrdering
12370 | orderMode: OrderingMode
12371 | fromId: StixRef
12372 | toId: StixRef
12373 | fromTypes: [String]
12374 | toTypes: [String]
12375 | relationship_type: String
12376 | startTimeStart: DateTime
12377 | startTimeStop: DateTime
12378 | stopTimeStart: DateTime
12379 | stopTimeStop: DateTime
12380 | firstSeenStart: DateTime
12381 | firstSeenStop: DateTime
12382 | lastSeenStart: DateTime
12383 | lastSeenStop: DateTime
12384 | confidences: [Int]
12385 | search: String
12386 | filters: FilterGroup
12387 | ): StixCoreRelationshipConnection
12388 | killChainPhases: [KillChainPhase!]
12389 | # Technical
12390 | creators: [Creator!]
12391 | toStix: String
12392 | editContext: [EditUserContext!]
12393 | status: Status
12394 | workflowEnabled: Boolean
12395 | }
12396 | input StixCoreRelationshipAddInput {
12397 | # StixRelationship
12398 | stix_id: StixId
12399 | x_opencti_stix_ids: [StixId]
12400 | fromId: StixRef!
12401 | toId: StixRef!
12402 | created: DateTime
12403 | modified: DateTime
12404 | confidence: Int
12405 | relationship_type: String!
12406 | createdBy: String
12407 | objectMarking: [String]
12408 | # StixCoreRelationship
12409 | description: String
12410 | start_time: DateTime
12411 | stop_time: DateTime
12412 | revoked: Boolean
12413 | lang: String
12414 | objectLabel: [String]
12415 | objectOrganization: [String]
12416 | externalReferences: [String]
12417 | killChainPhases: [String]
12418 | x_opencti_workflow_id: String
12419 | clientMutationId: String
12420 | update: Boolean
12421 | }
12422 |
12423 | ############## StixSightingRelationships
12424 | enum StixSightingRelationshipsOrdering {
12425 | confidence
12426 | x_opencti_negative
12427 | first_seen
12428 | last_seen
12429 | created
12430 | modified
12431 | created_at
12432 | updated_at
12433 | objectMarking
12434 | objectLabel
12435 | toName
12436 | toValidFrom
12437 | toValidUntil
12438 | toPatternType
12439 | toCreatedAt
12440 | attribute_count
12441 | x_opencti_workflow_id
12442 | _score
12443 | }
12444 | type StixSightingRelationshipConnection {
12445 | pageInfo: PageInfo!
12446 | edges: [StixSightingRelationshipsEdge]
12447 | }
12448 | type StixSightingRelationshipsEdge {
12449 | cursor: String!
12450 | node: StixSightingRelationship!
12451 | }
12452 | type StixSightingRelationship implements BasicRelationship & StixRelationship {
12453 | # BasicRelationship
12454 | id: ID! # internal_id
12455 | standard_id: String!
12456 | entity_type: String!
12457 | parent_types: [String]!
12458 | fromRole: String
12459 | toRole: String
12460 | created_at: DateTime!
12461 | updated_at: DateTime!
12462 | # StixRelationship
12463 | representative: Representative!
12464 | x_opencti_stix_ids: [StixId]
12465 | is_inferred: Boolean!
12466 | from: StixObjectOrStixRelationshipOrCreator
12467 | fromId: String!
12468 | fromType: String!
12469 | to: StixObjectOrStixRelationshipOrCreator
12470 | toId: String!
12471 | toType: String!
12472 | x_opencti_inferences: [Inference]
12473 | spec_version: String!
12474 | created: DateTime
12475 | modified: DateTime
12476 | confidence: Int
12477 | relationship_type: String!
12478 | createdBy: Identity
12479 | objectMarking: [MarkingDefinition!]
12480 | draftVersion: DraftVersion
12481 | # StixSightingRelationship
12482 | description: String
12483 | first_seen: DateTime
12484 | last_seen: DateTime
12485 | attribute_count: Int!
12486 | x_opencti_negative: Boolean!
12487 | objectLabel: [Label!]
12488 | objectOrganization: [Organization!]
12489 | externalReferences(first: Int): ExternalReferenceConnection
12490 | containersNumber: Number
12491 | containers(first: Int, entityTypes: [String!]): ContainerConnection
12492 | reports(first: Int): ReportConnection
12493 | notes(first: Int): NoteConnection
12494 | opinions(first: Int): OpinionConnection
12495 | groupings(first: Int): GroupingConnection
12496 | cases(first: Int): CaseConnection
12497 | # Technical
12498 | creators: [Creator!]
12499 | toStix: String
12500 | editContext: [EditUserContext!]
12501 | status: Status
12502 | workflowEnabled: Boolean
12503 | }
12504 | input StixSightingRelationshipAddInput {
12505 | # StixRelationship
12506 | stix_id: StixId
12507 | x_opencti_stix_ids: [StixId]
12508 | fromId: StixRef!
12509 | toId: StixRef!
12510 | created: DateTime
12511 | modified: DateTime
12512 | confidence: Int
12513 | createdBy: String
12514 | objectMarking: [String]
12515 | # StixSightingRelationship
12516 | description: String
12517 | first_seen: DateTime
12518 | last_seen: DateTime
12519 | attribute_count: Int!
12520 | x_opencti_negative: Boolean
12521 | objectLabel: [String]
12522 | objectOrganization: [String]
12523 | externalReferences: [String]
12524 | clientMutationId: String
12525 | update: Boolean
12526 | x_opencti_workflow_id: String
12527 | }
12528 |
12529 | ############## StixRefRelationships
12530 | enum StixRefRelationshipsOrdering {
12531 | relationship_type
12532 | entity_type
12533 | confidence
12534 | start_time
12535 | stop_time
12536 | created
12537 | modified
12538 | created_at
12539 | updated_at
12540 | toName
12541 | toValidFrom
12542 | toValidUntil
12543 | toPatternType
12544 | toCreatedAt
12545 | _score
12546 | }
12547 | type StixRefRelationshipConnection {
12548 | pageInfo: PageInfo!
12549 | edges: [StixRefRelationshipEdge]
12550 | }
12551 | type StixRefRelationshipEdge {
12552 | cursor: String!
12553 | node: StixRefRelationship!
12554 | }
12555 | type StixRefRelationship implements BasicRelationship & StixRelationship {
12556 | # BasicRelationship
12557 | id: ID! # internal_id
12558 | standard_id: String!
12559 | entity_type: String!
12560 | parent_types: [String]!
12561 | fromRole: String
12562 | toRole: String
12563 | created_at: DateTime!
12564 | updated_at: DateTime!
12565 | # StixRelationship
12566 | representative: Representative!
12567 | x_opencti_stix_ids: [StixId]
12568 | is_inferred: Boolean!
12569 | from: StixObjectOrStixRelationshipOrCreator
12570 | to: StixObjectOrStixRelationshipOrCreator
12571 | x_opencti_inferences: [Inference]
12572 | spec_version: String!
12573 | created: DateTime
12574 | modified: DateTime
12575 | confidence: Int
12576 | relationship_type: String!
12577 | createdBy: Identity
12578 | objectMarking: [MarkingDefinition!]
12579 | draftVersion: DraftVersion
12580 | # StixRefRelationship
12581 | start_time: DateTime
12582 | stop_time: DateTime
12583 | datable: Boolean
12584 | containersNumber: Number
12585 | containers(first: Int, entityTypes: [String!]): ContainerConnection
12586 | notes(first: Int): NoteConnection
12587 | reports(first: Int): ReportConnection
12588 | opinions(first: Int): OpinionConnection
12589 | groupings(first: Int): GroupingConnection
12590 | cases(first: Int): CaseConnection
12591 | toStix: String
12592 | # Technical
12593 | creators: [Creator!]
12594 | editContext: [EditUserContext!]
12595 | }
12596 |
12597 | type DefinitionRefRelationship {
12598 | entity: StixObjectOrStixRelationshipOrCreator!
12599 | from: [String!]
12600 | to: [String!]
12601 | }
12602 |
12603 | # Mutations
12604 | input StixRefRelationshipAddInput {
12605 | stix_id: StixId
12606 | x_opencti_stix_ids: [StixId]
12607 | fromId: StixRef
12608 | toId: StixRef
12609 | relationship_type: String!
12610 | confidence: Int
12611 | createdBy: String
12612 | start_time: DateTime
12613 | stop_time: DateTime
12614 | objectMarking: [String]
12615 | objectLabel: [String]
12616 | created: DateTime
12617 | modified: DateTime
12618 | clientMutationId: String
12619 | update: Boolean
12620 | file: Upload
12621 | }
12622 | input StixRefRelationshipsAddInput {
12623 | relationship_type: String!
12624 | fromIds: [StixRef]
12625 | toIds: [StixRef!]!
12626 | }
12627 |
12628 | ### QUERIES
12629 |
12630 | type Query {
12631 | stix(id: String!): String @auth(for: [KNOWLEDGE])
12632 | enrichmentConnectors(type: String!): [Connector] @auth(for: [MODULES])
12633 |
12634 | ###### INTERNAL
12635 |
12636 | about: AppInfo @auth
12637 | logsWorkerConfig: LogsWorkerConfig @auth(for: [CONNECTORAPI])
12638 | rabbitMQMetrics(prefix: String): RabbitMQMetrics @auth(for: [MODULES])
12639 | elasticSearchMetrics: ElasticSearchMetrics @auth(for: [MODULES])
12640 | logs(
12641 | first: Int
12642 | after: ID
12643 | orderBy: LogsOrdering
12644 | orderMode: OrderingMode
12645 | filters: FilterGroup
12646 | search: String
12647 | ): LogConnection @auth(for: [KNOWLEDGE, SETTINGS_SETACCESSES])
12648 | audits(
12649 | first: Int
12650 | after: ID
12651 | types: [String!]
12652 | orderBy: LogsOrdering
12653 | orderMode: OrderingMode
12654 | filters: FilterGroup
12655 | search: String
12656 | ): LogConnection @auth(for: [SETTINGS_SETACCESSES, SETTINGS_SECURITYACTIVITY, VIRTUAL_ORGANIZATION_ADMIN])
12657 | auditsNumber(
12658 | dateAttribute: String
12659 | types: [String]
12660 | startDate: DateTime
12661 | endDate: DateTime
12662 | onlyInferred: Boolean
12663 | filters: FilterGroup
12664 | search: String
12665 | ): Number @auth(for: [SETTINGS_SETACCESSES, SETTINGS_SECURITYACTIVITY, VIRTUAL_ORGANIZATION_ADMIN])
12666 | auditsTimeSeries(
12667 | field: String!
12668 | operation: StatsOperation!
12669 | startDate: DateTime!
12670 | endDate: DateTime
12671 | interval: String!
12672 | types: [String]
12673 | filters: FilterGroup
12674 | search: String
12675 | ): [TimeSeries] @auth(for: [SETTINGS_SETACCESSES, SETTINGS_SECURITYACTIVITY, VIRTUAL_ORGANIZATION_ADMIN])
12676 | auditsDistribution(
12677 | field: String!
12678 | startDate: DateTime
12679 | endDate: DateTime
12680 | dateAttribute: String
12681 | operation: StatsOperation!
12682 | limit: Int
12683 | order: String
12684 | types: [String]
12685 | filters: FilterGroup
12686 | search: String
12687 | ): [Distribution] @auth(for: [SETTINGS_SETACCESSES, SETTINGS_SECURITYACTIVITY, VIRTUAL_ORGANIZATION_ADMIN])
12688 | auditsMultiTimeSeries(
12689 | operation: StatsOperation!
12690 | startDate: DateTime!
12691 | endDate: DateTime
12692 | interval: String!
12693 | onlyInferred: Boolean
12694 | timeSeriesParameters: [AuditsTimeSeriesParameters]
12695 | ): [MultiTimeSeries] @auth(for: [SETTINGS_SETACCESSES, SETTINGS_SECURITYACTIVITY, VIRTUAL_ORGANIZATION_ADMIN])
12696 | subType(id: String!): SubType @auth(for: [KNOWLEDGE, SETTINGS_SETCUSTOMIZATION])
12697 | subTypes(
12698 | first: Int
12699 | after: ID
12700 | orderBy: SubTypesOrdering
12701 | orderMode: OrderingMode
12702 | type: String
12703 | includeParents: Boolean
12704 | search: String
12705 | ): SubTypeConnection! @auth
12706 | file(id: String!): File @auth(for: [KNOWLEDGE_KNASKIMPORT])
12707 | importFiles(
12708 | first: Int
12709 | after: ID
12710 | orderBy: FileOrdering
12711 | orderMode: OrderingMode
12712 | search: String
12713 | filters: FilterGroup
12714 | ): FileConnection @auth(for: [KNOWLEDGE_KNASKIMPORT])
12715 | pendingFiles(
12716 | first: Int
12717 | after: ID
12718 | orderBy: FileOrdering
12719 | orderMode: OrderingMode
12720 | search: String
12721 | filters: FilterGroup
12722 | ): FileConnection @auth(for: [KNOWLEDGE_KNASKIMPORT])
12723 | filesMetrics: FilesMetrics @auth(for: [SETTINGS_FILEINDEXING])
12724 |
12725 | ######## INDEXED FILES
12726 | indexedFiles(first: Int, after: ID, search: String): IndexedFileConnection @auth(for: [KNOWLEDGE])
12727 | indexedFilesCount(search: String): Int @auth(for: [KNOWLEDGE])
12728 | indexedFilesMetrics: FilesMetrics @auth(for: [SETTINGS_FILEINDEXING])
12729 |
12730 | ###### ENTITIES
12731 |
12732 | ######## INTERNAL OBJECT ENTITIES
12733 |
12734 | settings: Settings! @public # Some inner information are public
12735 | group(id: String!): Group @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
12736 | groups(first: Int, after: ID, orderBy: GroupsOrdering, orderMode: OrderingMode, search: String, filters: FilterGroup): GroupConnection
12737 | @auth(for: [SETTINGS_SETACCESSES, SETTINGS_SECURITYACTIVITY, VIRTUAL_ORGANIZATION_ADMIN])
12738 | roles(first: Int, after: ID, orderBy: RolesOrdering, orderMode: OrderingMode, search: String): RoleConnection
12739 | @auth(for: [SETTINGS_SETACCESSES])
12740 | me: MeUser! @auth
12741 | otpGeneration: OtpElement @auth
12742 | user(id: String!): User @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
12743 | creators(entityTypes: [String!]): CreatorConnection @auth(for: [KNOWLEDGE])
12744 | assignees(entityTypes: [String!]): AssigneeConnection @auth(for: [KNOWLEDGE])
12745 | participants(entityTypes: [String!]): ParticipantConnection @auth(for: [KNOWLEDGE])
12746 | members(
12747 | first: Int,
12748 | search: String,
12749 | filters: FilterGroup,
12750 | filterMode: FilterMode,
12751 | entityTypes: [MemberType!]
12752 | ): MemberConnection @auth(for: [KNOWLEDGE_KNUPDATE, EXPLORE_EXUPDATE, CONNECTORAPI, SETTINGS_SETACCESSES, SETTINGS_SECURITYACTIVITY, SETTINGS_SETCUSTOMIZATION, INGESTION_SETINGESTIONS])
12753 | systemMembers: MemberConnection @auth(for: [KNOWLEDGE_KNUPDATE, EXPLORE_EXUPDATE, CONNECTORAPI, SETTINGS_SETACCESSES, SETTINGS_SECURITYACTIVITY, SETTINGS_SETCUSTOMIZATION, INGESTION_SETINGESTIONS])
12754 | users(
12755 | first: Int
12756 | after: ID
12757 | orderBy: UsersOrdering
12758 | orderMode: OrderingMode
12759 | filters: FilterGroup
12760 | search: String
12761 | toStix: Boolean
12762 | ): UserConnection @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
12763 | sessions: [UserSession] @auth(for: [SETTINGS_SETACCESSES])
12764 | role(id: String!): Role @auth(for: [SETTINGS_SETACCESSES])
12765 | capabilities(first: Int): CapabilityConnection @auth(for: [SETTINGS_SETACCESSES])
12766 | connector(id: String!): Connector @auth(for: [MODULES])
12767 | connectors: [Connector!] @auth(for: [MODULES])
12768 | connectorsForWorker: [Connector] @auth(for: [MODULES])
12769 | connectorsForExport: [Connector] @auth(for: [KNOWLEDGE])
12770 | connectorsForImport: [Connector] @auth(for: [KNOWLEDGE])
12771 | connectorsForAnalysis: [Connector] @auth(for: [KNOWLEDGE])
12772 | connectorsForNotification: [Connector] @auth(for: [SETTINGS_SETACCESSES, SETTINGS_SETCUSTOMIZATION])
12773 | work(id: ID!): Work @auth(for: [MODULES])
12774 | works(
12775 | first: Int
12776 | after: ID
12777 | orderBy: WorksOrdering
12778 | orderMode: OrderingMode
12779 | search: String
12780 | filters: FilterGroup
12781 | ): WorkConnection @auth(for: [MODULES])
12782 | runtimeAttributes(
12783 | first: Int
12784 | search: String
12785 | orderMode: OrderingMode
12786 | attributeName: String!
12787 | ): AttributeConnection @auth(for: [KNOWLEDGE])
12788 | schemaAttributeNames(elementType: [String]!) : AttributeConnection @auth(for: [KNOWLEDGE, TAXIIAPI_SETCOLLECTIONS])
12789 | retentionRule(id: String!): RetentionRule @auth(for: [SETTINGS_SETCUSTOMIZATION])
12790 | retentionRules(
12791 | first: Int,
12792 | after: ID,
12793 | search: String,
12794 | orderBy: RetentionRuleOrdering
12795 | orderMode: OrderingMode
12796 | ): RetentionRuleConnection @auth(for: [SETTINGS_SETCUSTOMIZATION])
12797 | taxiiCollection(id: String!): TaxiiCollection @auth(for: [TAXIIAPI_SETCOLLECTIONS])
12798 | taxiiCollections(
12799 | first: Int
12800 | after: ID
12801 | orderBy: TaxiiCollectionOrdering
12802 | orderMode: OrderingMode
12803 | search: String
12804 | filters: FilterGroup
12805 | ): TaxiiCollectionConnection @public # Code protected
12806 | streamCollection(id: String!): StreamCollection @auth(for: [TAXIIAPI])
12807 | feed(id: String!): Feed @auth(for: [TAXIIAPI])
12808 | feeds(
12809 | first: Int
12810 | after: ID
12811 | orderBy: FeedOrdering
12812 | orderMode: OrderingMode
12813 | search: String
12814 | filters: FilterGroup
12815 | ): FeedConnection @public # Code protected
12816 | streamCollections(
12817 | first: Int
12818 | after: ID
12819 | orderBy: StreamCollectionOrdering
12820 | orderMode: OrderingMode
12821 | search: String
12822 | filters: FilterGroup
12823 | ): StreamCollectionConnection! @public # Code protected
12824 | statusTemplate(id: String!): StatusTemplate @auth
12825 | statusTemplates(
12826 | first: Int
12827 | after: ID
12828 | orderBy: StatusTemplateOrdering
12829 | orderMode: OrderingMode
12830 | search: String
12831 | ): StatusTemplateConnection @auth
12832 | status(id: String!): Status @auth
12833 | statuses(
12834 | first: Int
12835 | after: ID
12836 | orderBy: StatusOrdering
12837 | orderMode: OrderingMode
12838 | filters: FilterGroup
12839 | search: String
12840 | ): StatusConnection @auth
12841 | backgroundTask(id: String!): BackgroundTask @auth(for: [KNOWLEDGE])
12842 | backgroundTasks(
12843 | first: Int
12844 | after: ID
12845 | orderBy: BackgroundTasksOrdering
12846 | orderMode: OrderingMode
12847 | includeAuthorities: Boolean
12848 | filters: FilterGroup
12849 | search: String
12850 | ): BackgroundTaskConnection @auth(for: [KNOWLEDGE, SETTINGS_SETCUSTOMIZATION])
12851 | rule(id: String!): Rule @auth(for: [KNOWLEDGE])
12852 | rules: [Rule] @auth(for: [KNOWLEDGE, SETTINGS_SETCUSTOMIZATION])
12853 | ruleManagerInfo: RuleManager @auth(for: [SETTINGS_SETCUSTOMIZATION])
12854 | synchronizer(id: String!): Synchronizer @auth(for: [INGESTION])
12855 | synchronizers(
12856 | first: Int
12857 | after: ID
12858 | orderBy: SynchronizersOrdering
12859 | orderMode: OrderingMode
12860 | search: String
12861 | ): SynchronizerConnection @auth(for: [INGESTION])
12862 | synchronizerFetch(input: SynchronizerFetchInput): [RemoteStreamCollection] @auth(for: [INGESTION])
12863 | ######## STIX OBJECT ENTITIES
12864 |
12865 | ######## STIX META OBJECT ENTITIES
12866 | stixMetaObject(id: String!): StixMetaObject @auth(for: [KNOWLEDGE])
12867 | stixMetaObjects(
12868 | first: Int
12869 | after: ID
12870 | types: [String]
12871 | orderBy: StixMetaObjectsOrdering
12872 | orderMode: OrderingMode
12873 | filters: FilterGroup
12874 | search: String
12875 | ): StixMetaObjectConnection @auth(for: [KNOWLEDGE])
12876 | markingDefinition(id: String!): MarkingDefinition @auth(for: [KNOWLEDGE, SETTINGS_SETMARKINGS])
12877 | markingDefinitions(
12878 | first: Int
12879 | after: ID
12880 | orderBy: MarkingDefinitionsOrdering
12881 | orderMode: OrderingMode
12882 | filters: FilterGroup
12883 | search: String
12884 | toStix: Boolean
12885 | ): MarkingDefinitionConnection @auth(for: [KNOWLEDGE, SETTINGS_SETACCESSES, SETTINGS_SETMARKINGS])
12886 | label(id: String!): Label @auth(for: [KNOWLEDGE, SETTINGS_SETLABELS])
12887 | labels(
12888 | first: Int
12889 | after: ID
12890 | orderBy: LabelsOrdering
12891 | orderMode: OrderingMode
12892 | filters: FilterGroup
12893 | search: String
12894 | ): LabelConnection @auth(for: [KNOWLEDGE, SETTINGS_SETLABELS])
12895 | externalReference(id: String!): ExternalReference @auth(for: [KNOWLEDGE])
12896 | externalReferences(
12897 | first: Int
12898 | after: ID
12899 | orderBy: ExternalReferencesOrdering
12900 | orderMode: OrderingMode
12901 | filters: FilterGroup
12902 | search: String
12903 | ): ExternalReferenceConnection @auth(for: [KNOWLEDGE])
12904 | killChainPhase(id: String!): KillChainPhase @auth(for: [KNOWLEDGE, SETTINGS_SETLABELS])
12905 | killChainPhases(
12906 | first: Int
12907 | after: ID
12908 | orderBy: KillChainPhasesOrdering
12909 | orderMode: OrderingMode
12910 | filters: FilterGroup
12911 | search: String
12912 | ): KillChainPhaseConnection @auth(for: [KNOWLEDGE, SETTINGS_SETLABELS])
12913 |
12914 | ######## STIX CORE OBJECT ENTITIES
12915 |
12916 | stixCoreObjectRaw(id: String!): String @auth(for: [KNOWLEDGE])
12917 | stixCoreObject(id: String!): StixCoreObject @auth(for: [KNOWLEDGE])
12918 | stixCoreObjectAnalysis(id: ID!, contentSource: String!, contentType: AnalysisContentType!): Analysis @auth(for: [KNOWLEDGE])
12919 | stixCoreObjects(
12920 | first: Int
12921 | after: ID
12922 | types: [String]
12923 | orderBy: StixCoreObjectsOrdering
12924 | orderMode: OrderingMode
12925 | filters: FilterGroup
12926 | search: String
12927 | ): StixCoreObjectConnection @auth(for: [KNOWLEDGE])
12928 | globalSearch(
12929 | first: Int
12930 | after: ID
12931 | search: String
12932 | types: [String]
12933 | orderBy: StixCoreObjectsOrdering
12934 | orderMode: OrderingMode
12935 | filters: FilterGroup
12936 | ): StixCoreObjectConnection @auth(for: [KNOWLEDGE])
12937 | stixCoreObjectsExportFiles(first: Int, exportContext: ExportContext!): FileConnection @auth(for: [KNOWLEDGE_KNGETEXPORT])
12938 | stixCoreObjectsTimeSeries(
12939 | authorId: String
12940 | field: String!
12941 | operation: StatsOperation!
12942 | startDate: DateTime!
12943 | endDate: DateTime
12944 | interval: String!
12945 | onlyInferred: Boolean
12946 | types: [String]
12947 | filters: FilterGroup
12948 | search: String
12949 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
12950 | stixCoreObjectsMultiTimeSeries(
12951 | startDate: DateTime!
12952 | endDate: DateTime
12953 | interval: String!
12954 | onlyInferred: Boolean
12955 | timeSeriesParameters: [StixCoreObjectsTimeSeriesParameters]
12956 | ): [MultiTimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
12957 | stixCoreObjectsNumber(
12958 | dateAttribute: String
12959 | types: [String]
12960 | startDate: DateTime
12961 | endDate: DateTime
12962 | onlyInferred: Boolean
12963 | filters: FilterGroup
12964 | search: String
12965 | ): Number @auth(for: [KNOWLEDGE, EXPLORE])
12966 | stixCoreObjectsMultiNumber(
12967 | dateAttribute: String
12968 | startDate: DateTime
12969 | endDate: DateTime
12970 | onlyInferred: Boolean
12971 | numberParameters: [StixCoreObjectsNumberParameters]
12972 | ): [Number] @auth(for: [KNOWLEDGE, EXPLORE])
12973 | stixCoreObjectsDistribution(
12974 | objectId: [String]
12975 | relationship_type: [String]
12976 | toTypes: [String]
12977 | elementWithTargetTypes: [String]
12978 | field: String!
12979 | startDate: DateTime
12980 | endDate: DateTime
12981 | dateAttribute: String
12982 | operation: StatsOperation!
12983 | limit: Int
12984 | order: String
12985 | types: [String]
12986 | filters: FilterGroup
12987 | search: String
12988 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
12989 | stixCoreObjectsMultiDistribution(
12990 | field: String!
12991 | startDate: DateTime
12992 | endDate: DateTime
12993 | dateAttribute: String
12994 | operation: StatsOperation!
12995 | limit: Int
12996 | order: String
12997 | distributionParameters: StixCoreObjectsDistributionParameters
12998 | ): [MultiDistribution] @auth(for: [KNOWLEDGE, EXPLORE])
12999 | filtersRepresentatives(filters: FilterGroup!): [RepresentativeWithId!]! @auth(for: [KNOWLEDGE, SETTINGS_SECURITYACTIVITY, INGESTION_SETINGESTIONS, SETTINGS_SETACCESSES, SETTINGS_SETCUSTOMIZATION])
13000 |
13001 | ######## STIX DOMAIN OBJECT ENTITIES
13002 |
13003 | stixDomainObject(id: String!): StixDomainObject @auth(for: [KNOWLEDGE])
13004 | stixDomainObjects(
13005 | first: Int
13006 | after: ID
13007 | types: [String]
13008 | orderBy: StixDomainObjectsOrdering
13009 | orderMode: OrderingMode
13010 | filters: FilterGroup
13011 | search: String
13012 | ): StixDomainObjectConnection @auth(for: [KNOWLEDGE])
13013 | bookmarks(first: Int, after: ID, types: [String], filters: FilterGroup): StixDomainObjectConnection @auth(for: [KNOWLEDGE])
13014 | stixDomainObjectsExportFiles(first: Int, exportContext: ExportContext!): FileConnection @auth(for: [KNOWLEDGE_KNGETEXPORT])
13015 | stixDomainObjectsTimeSeries(
13016 | authorId: String
13017 | field: String!
13018 | operation: StatsOperation!
13019 | startDate: DateTime!
13020 | endDate: DateTime
13021 | interval: String!
13022 | types: [String]
13023 | onlyInferred: Boolean
13024 | filters: FilterGroup
13025 | search: String
13026 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE, SETTINGS_SETCUSTOMIZATION])
13027 | stixDomainObjectsNumber(
13028 | dateAttribute: String
13029 | types: [String]
13030 | endDate: DateTime
13031 | onlyInferred: Boolean
13032 | filters: FilterGroup
13033 | search: String): Number @auth(for: [KNOWLEDGE, EXPLORE, SETTINGS_SETCUSTOMIZATION])
13034 | stixDomainObjectsDistribution(
13035 | objectId: [String]
13036 | relationship_type: [String]
13037 | toTypes: [String]
13038 | elementWithTargetTypes: [String]
13039 | field: String!
13040 | dateAttribute: String
13041 | operation: StatsOperation!
13042 | limit: Int
13043 | order: String
13044 | types: [String]
13045 | filters: FilterGroup
13046 | search: String
13047 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13048 | attackPattern(id: String): AttackPattern @auth(for: [KNOWLEDGE])
13049 | attackPatterns(
13050 | first: Int
13051 | after: ID
13052 | orderBy: AttackPatternsOrdering
13053 | orderMode: OrderingMode
13054 | filters: FilterGroup
13055 | search: String
13056 | toStix: Boolean
13057 | ): AttackPatternConnection @auth(for: [KNOWLEDGE])
13058 | attackPatternsMatrix: AttackPatternsMatrix @auth(for: [KNOWLEDGE])
13059 | campaign(id: String): Campaign @auth(for: [KNOWLEDGE])
13060 | campaigns(
13061 | first: Int
13062 | after: ID
13063 | orderBy: CampaignsOrdering
13064 | orderMode: OrderingMode
13065 | filters: FilterGroup
13066 | search: String
13067 | toStix: Boolean
13068 | ): CampaignConnection @auth(for: [KNOWLEDGE])
13069 | campaignsTimeSeries(
13070 | objectId: String
13071 | field: String!
13072 | operation: StatsOperation!
13073 | startDate: DateTime!
13074 | endDate: DateTime!
13075 | interval: String!
13076 | relationship_type: [String]
13077 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13078 | # Containers
13079 | container(id: String): Container @auth(for: [KNOWLEDGE])
13080 | containers(
13081 | first: Int
13082 | after: ID
13083 | orderBy: ContainersOrdering
13084 | orderMode: OrderingMode
13085 | filters: FilterGroup
13086 | search: String
13087 | toStix: Boolean
13088 | ): ContainerConnection @auth(for: [KNOWLEDGE])
13089 | containersObjectsOfObject(
13090 | id: String!
13091 | types: [String]
13092 | filters: FilterGroup
13093 | search: String
13094 | ): StixObjectOrStixRelationshipConnection @auth(for: [KNOWLEDGE])
13095 | containersNumber(objectId: String, endDate: DateTime): Number @auth(for: [KNOWLEDGE, EXPLORE])
13096 | note(id: String): Note @auth(for: [KNOWLEDGE])
13097 | notes(
13098 | first: Int
13099 | after: ID
13100 | orderBy: NotesOrdering
13101 | orderMode: OrderingMode
13102 | filters: FilterGroup
13103 | search: String
13104 | toStix: Boolean
13105 | ): NoteConnection @auth(for: [KNOWLEDGE])
13106 | notesNumber(objectId: String, endDate: DateTime): Number @auth(for: [KNOWLEDGE, EXPLORE])
13107 | notesTimeSeries(
13108 | objectId: String
13109 | authorId: String
13110 | field: String!
13111 | operation: StatsOperation!
13112 | startDate: DateTime!
13113 | endDate: DateTime!
13114 | interval: String!
13115 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13116 | notesDistribution(
13117 | objectId: String
13118 | field: String!
13119 | dateAttribute: String
13120 | operation: StatsOperation!
13121 | limit: Int
13122 | order: String
13123 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13124 | noteContainsStixObjectOrStixRelationship(id: String!, stixObjectOrStixRelationshipId: String!): Boolean
13125 | @auth(for: [KNOWLEDGE])
13126 | observedData(id: String): ObservedData @auth(for: [KNOWLEDGE])
13127 | observedDatas(
13128 | first: Int
13129 | after: ID
13130 | orderBy: ObservedDatasOrdering
13131 | orderMode: OrderingMode
13132 | filters: FilterGroup
13133 | search: String
13134 | toStix: Boolean
13135 | ): ObservedDataConnection @auth(for: [KNOWLEDGE])
13136 | observedDatasTimeSeries(
13137 | objectId: String
13138 | authorId: String
13139 | field: String!
13140 | operation: StatsOperation!
13141 | startDate: DateTime!
13142 | endDate: DateTime!
13143 | interval: String!
13144 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13145 | observedDatasNumber(objectId: String, endDate: DateTime): Number @auth(for: [KNOWLEDGE, EXPLORE])
13146 | observedDatasDistribution(
13147 | objectId: String
13148 | field: String!
13149 | dateAttribute: String
13150 | operation: StatsOperation!
13151 | limit: Int
13152 | order: String
13153 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13154 | observedDataContainsStixObjectOrStixRelationship(id: String!, stixObjectOrStixRelationshipId: String!): Boolean
13155 | @auth(for: [KNOWLEDGE])
13156 | opinion(id: String): Opinion @auth(for: [KNOWLEDGE])
13157 | opinions(
13158 | first: Int
13159 | after: ID
13160 | orderBy: OpinionsOrdering
13161 | orderMode: OrderingMode
13162 | filters: FilterGroup
13163 | search: String
13164 | toStix: Boolean
13165 | ): OpinionConnection @auth(for: [KNOWLEDGE])
13166 | opinionsTimeSeries(
13167 | objectId: String
13168 | authorId: String
13169 | field: String!
13170 | operation: StatsOperation!
13171 | startDate: DateTime!
13172 | endDate: DateTime!
13173 | interval: String!
13174 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13175 | opinionsNumber(objectId: String, endDate: DateTime): Number @auth(for: [KNOWLEDGE, EXPLORE])
13176 | opinionsDistribution(
13177 | objectId: String
13178 | field: String!
13179 | dateAttribute: String
13180 | operation: StatsOperation!
13181 | limit: Int
13182 | order: String
13183 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13184 | opinionContainsStixObjectOrStixRelationship(id: String!, stixObjectOrStixRelationshipId: String!): Boolean
13185 | @auth(for: [KNOWLEDGE])
13186 | myOpinion(id: String!): Opinion @auth(for: [KNOWLEDGE])
13187 | report(id: String): Report @auth(for: [KNOWLEDGE])
13188 | reports(
13189 | first: Int
13190 | after: ID
13191 | orderBy: ReportsOrdering
13192 | orderMode: OrderingMode
13193 | filters: FilterGroup
13194 | search: String
13195 | toStix: Boolean
13196 | ): ReportConnection @auth(for: [KNOWLEDGE])
13197 | reportsTimeSeries(
13198 | objectId: String
13199 | authorId: String
13200 | reportType: String
13201 | field: String!
13202 | operation: StatsOperation!
13203 | startDate: DateTime!
13204 | endDate: DateTime!
13205 | interval: String!
13206 | filters: FilterGroup
13207 | search: String
13208 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13209 | reportsNumber(
13210 | reportType: String
13211 | objectId: String
13212 | authorId: String
13213 | endDate: DateTime
13214 | filters: FilterGroup
13215 | search: String
13216 | ): Number @auth(for: [KNOWLEDGE, EXPLORE])
13217 | reportsDistribution(
13218 | objectId: String
13219 | authorId: String
13220 | field: String!
13221 | operation: StatsOperation!
13222 | limit: Int
13223 | order: String
13224 | startDate: DateTime
13225 | endDate: DateTime
13226 | dateAttribute: String
13227 | filters: FilterGroup
13228 | search: String
13229 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13230 | reportContainsStixObjectOrStixRelationship(id: String!, stixObjectOrStixRelationshipId: String!): Boolean
13231 | @auth(for: [KNOWLEDGE])
13232 | courseOfAction(id: String): CourseOfAction @auth(for: [KNOWLEDGE])
13233 | coursesOfAction(
13234 | first: Int
13235 | after: ID
13236 | orderBy: CoursesOfActionOrdering
13237 | orderMode: OrderingMode
13238 | filters: FilterGroup
13239 | search: String
13240 | toStix: Boolean
13241 | ): CourseOfActionConnection @auth(for: [KNOWLEDGE])
13242 | # Identities
13243 | identity(id: String!): Identity @auth(for: [KNOWLEDGE])
13244 | identities(
13245 | first: Int
13246 | after: ID
13247 | types: [String]
13248 | orderBy: IdentitiesOrdering
13249 | orderMode: OrderingMode
13250 | search: String
13251 | filters: FilterGroup
13252 | toStix: Boolean
13253 | ): IdentityConnection @auth(for: [KNOWLEDGE, INGESTION_SETINGESTIONS])
13254 | individual(id: String!): Individual @auth(for: [KNOWLEDGE])
13255 | individuals(
13256 | first: Int
13257 | after: ID
13258 | orderBy: IndividualsOrdering
13259 | orderMode: OrderingMode
13260 | filters: FilterGroup
13261 | search: String
13262 | toStix: Boolean
13263 | ): IndividualConnection @auth(for: [KNOWLEDGE])
13264 | sector(id: String): Sector @auth(for: [KNOWLEDGE])
13265 | sectors(
13266 | first: Int
13267 | after: ID
13268 | orderBy: SectorsOrdering
13269 | orderMode: OrderingMode
13270 | filters: FilterGroup
13271 | search: String
13272 | toStix: Boolean
13273 | ): SectorConnection @auth(for: [KNOWLEDGE])
13274 | system(id: String): System @auth(for: [KNOWLEDGE])
13275 | systems(
13276 | first: Int
13277 | after: ID
13278 | orderBy: SystemsOrdering
13279 | orderMode: OrderingMode
13280 | filters: FilterGroup
13281 | search: String
13282 | toStix: Boolean
13283 | ): SystemConnection @auth(for: [KNOWLEDGE])
13284 |
13285 | infrastructure(id: String!): Infrastructure @auth(for: [KNOWLEDGE])
13286 | infrastructures(
13287 | first: Int
13288 | after: ID
13289 | orderBy: InfrastructuresOrdering
13290 | orderMode: OrderingMode
13291 | filters: FilterGroup
13292 | search: String
13293 | ): InfrastructureConnection @auth(for: [KNOWLEDGE])
13294 | intrusionSet(id: String): IntrusionSet @auth(for: [KNOWLEDGE])
13295 | intrusionSets(
13296 | first: Int
13297 | after: ID
13298 | orderBy: IntrusionSetsOrdering
13299 | orderMode: OrderingMode
13300 | filters: FilterGroup
13301 | search: String
13302 | toStix: Boolean
13303 | ): IntrusionSetConnection @auth(for: [KNOWLEDGE])
13304 | # Locations
13305 | location(id: String!): Location @auth(for: [KNOWLEDGE])
13306 | locations(
13307 | first: Int
13308 | after: ID
13309 | types: [String]
13310 | orderBy: LocationsOrdering
13311 | orderMode: OrderingMode
13312 | search: String
13313 | filters: FilterGroup
13314 | toStix: Boolean
13315 | ): LocationConnection @auth(for: [KNOWLEDGE])
13316 | city(id: String): City @auth(for: [KNOWLEDGE])
13317 | cities(
13318 | first: Int
13319 | after: ID
13320 | orderBy: CitiesOrdering
13321 | orderMode: OrderingMode
13322 | filters: FilterGroup
13323 | search: String
13324 | toStix: Boolean
13325 | ): CityConnection @auth(for: [KNOWLEDGE])
13326 | country(id: String): Country @auth(for: [KNOWLEDGE])
13327 | countries(
13328 | first: Int
13329 | after: ID
13330 | orderBy: CountriesOrdering
13331 | orderMode: OrderingMode
13332 | filters: FilterGroup
13333 | search: String
13334 | toStix: Boolean
13335 | ): CountryConnection @auth(for: [KNOWLEDGE])
13336 | region(id: String!): Region @auth(for: [KNOWLEDGE])
13337 | regions(
13338 | first: Int
13339 | after: ID
13340 | orderBy: RegionsOrdering
13341 | orderMode: OrderingMode
13342 | filters: FilterGroup
13343 | search: String
13344 | toStix: Boolean
13345 | ): RegionConnection @auth(for: [KNOWLEDGE])
13346 | position(id: String!): Position @auth(for: [KNOWLEDGE])
13347 | positions(
13348 | first: Int
13349 | after: ID
13350 | orderBy: PositionsOrdering
13351 | orderMode: OrderingMode
13352 | filters: FilterGroup
13353 | search: String
13354 | toStix: Boolean
13355 | ): PositionConnection @auth(for: [KNOWLEDGE])
13356 | malware(id: String): Malware @auth(for: [KNOWLEDGE])
13357 | malwares(
13358 | first: Int
13359 | after: ID
13360 | orderBy: MalwaresOrdering
13361 | orderMode: OrderingMode
13362 | filters: FilterGroup
13363 | search: String
13364 | toStix: Boolean
13365 | ): MalwareConnection @auth(for: [KNOWLEDGE])
13366 | threatActor(id: String): ThreatActor @auth(for: [KNOWLEDGE])
13367 | threatActors(
13368 | first: Int
13369 | after: ID
13370 | orderBy: ThreatActorsOrdering
13371 | orderMode: OrderingMode
13372 | filters: FilterGroup
13373 | search: String
13374 | toStix: Boolean
13375 | ): ThreatActorConnection @auth(for: [KNOWLEDGE])
13376 | threatActorGroup(id: String): ThreatActorGroup @auth(for: [KNOWLEDGE])
13377 | threatActorsGroup(
13378 | first: Int
13379 | after: ID
13380 | orderBy: ThreatActorsOrdering
13381 | orderMode: OrderingMode
13382 | filters: FilterGroup
13383 | search: String
13384 | toStix: Boolean
13385 | ): ThreatActorGroupConnection @auth(for: [KNOWLEDGE])
13386 | tool(id: String): Tool @auth(for: [KNOWLEDGE])
13387 | tools(
13388 | first: Int
13389 | after: ID
13390 | orderBy: ToolsOrdering
13391 | orderMode: OrderingMode
13392 | filters: FilterGroup
13393 | search: String
13394 | toStix: Boolean
13395 | ): ToolConnection @auth(for: [KNOWLEDGE])
13396 | vulnerability(id: String): Vulnerability @auth(for: [KNOWLEDGE])
13397 | vulnerabilities(
13398 | first: Int
13399 | after: ID
13400 | orderBy: VulnerabilitiesOrdering
13401 | orderMode: OrderingMode
13402 | filters: FilterGroup
13403 | search: String
13404 | toStix: Boolean
13405 | ): VulnerabilityConnection @auth(for: [KNOWLEDGE])
13406 | incident(id: String): Incident @auth(for: [KNOWLEDGE])
13407 | incidents(
13408 | first: Int
13409 | after: ID
13410 | orderBy: IncidentsOrdering
13411 | orderMode: OrderingMode
13412 | filters: FilterGroup
13413 | search: String
13414 | toStix: Boolean
13415 | ): IncidentConnection @auth(for: [KNOWLEDGE])
13416 | incidentsTimeSeries(
13417 | objectId: String
13418 | field: String!
13419 | operation: StatsOperation!
13420 | startDate: DateTime!
13421 | endDate: DateTime!
13422 | interval: String!
13423 | relationship_type: [String]
13424 | ): [TimeSeries] @auth(for: [KNOWLEDGE])
13425 |
13426 | ######## STIX CYBER OBSERVABLE ENTITIES
13427 |
13428 | stixCyberObservable(id: String!): StixCyberObservable @auth(for: [KNOWLEDGE])
13429 | stixCyberObservables(
13430 | first: Int
13431 | after: ID
13432 | types: [String]
13433 | orderBy: StixCyberObservablesOrdering
13434 | orderMode: OrderingMode
13435 | filters: FilterGroup
13436 | search: String
13437 | toStix: Boolean
13438 | ): StixCyberObservableConnection @auth(for: [KNOWLEDGE])
13439 | stixCyberObservablesExportFiles(first: Int, exportContext: ExportContext!): FileConnection @auth(for: [KNOWLEDGE_KNGETEXPORT])
13440 | stixCyberObservablesNumber(
13441 | dateAttribute: String
13442 | types: [String]
13443 | authorId: String
13444 | endDate: DateTime
13445 | filters: FilterGroup
13446 | search: String
13447 | ): Number @auth(for: [KNOWLEDGE, EXPLORE])
13448 | stixCyberObservablesTimeSeries(
13449 | types: [String]
13450 | filters: FilterGroup
13451 | search: String
13452 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13453 | stixCyberObservablesDistribution(
13454 | objectId: String
13455 | field: String!
13456 | dateAttribute: String
13457 | operation: String!
13458 | filters: FilterGroup
13459 | search: String
13460 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13461 |
13462 | ######## STIX RELATIONSHIPS
13463 | stixRelationship(id: String): StixRelationship @auth(for: [KNOWLEDGE])
13464 | stixRelationships(
13465 | first: Int
13466 | after: ID
13467 | orderBy: StixRelationshipsOrdering
13468 | orderMode: OrderingMode
13469 | fromOrToId: String
13470 | elementWithTargetTypes: [String]
13471 | fromId: [String]
13472 | fromRole: String
13473 | fromTypes: [String]
13474 | toId: [String]
13475 | toRole: String
13476 | toTypes: [String]
13477 | relationship_type: [String]
13478 | startTimeStart: DateTime
13479 | startTimeStop: DateTime
13480 | stopTimeStart: DateTime
13481 | stopTimeStop: DateTime
13482 | firstSeenStart: DateTime
13483 | firstSeenStop: DateTime
13484 | lastSeenStart: DateTime
13485 | lastSeenStop: DateTime
13486 | startDate: DateTime
13487 | endDate: DateTime
13488 | confidences: [Int]
13489 | search: String
13490 | filters: FilterGroup
13491 | dynamicFrom: FilterGroup
13492 | dynamicTo: FilterGroup
13493 | stix: Boolean
13494 | ): StixRelationshipConnection @auth(for: [KNOWLEDGE])
13495 | stixRelationshipsTimeSeries(
13496 | field: String!
13497 | operation: StatsOperation!
13498 | startDate: DateTime!
13499 | endDate: DateTime
13500 | interval: String!
13501 | onlyInferred: Boolean
13502 | fromOrToId: [String]
13503 | elementWithTargetTypes: [String]
13504 | fromId: [String]
13505 | fromRole: String
13506 | fromTypes: [String]
13507 | toId: [String]
13508 | toRole: String
13509 | toTypes: [String]
13510 | relationship_type: [String]
13511 | confidences: [Int]
13512 | search: String
13513 | filters: FilterGroup
13514 | dynamicFrom: FilterGroup
13515 | dynamicTo: FilterGroup
13516 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE, SETTINGS_SETCUSTOMIZATION])
13517 | stixRelationshipsMultiTimeSeries(
13518 | operation: StatsOperation!
13519 | startDate: DateTime!
13520 | endDate: DateTime
13521 | interval: String!
13522 | onlyInferred: Boolean
13523 | timeSeriesParameters: [StixRelationshipsTimeSeriesParameters]
13524 | ): [MultiTimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13525 | stixRelationshipsDistribution(
13526 | field: String!
13527 | operation: StatsOperation!
13528 | startDate: DateTime
13529 | endDate: DateTime
13530 | dateAttribute: String
13531 | isTo: Boolean
13532 | limit: Int
13533 | order: String
13534 | fromOrToId: [String]
13535 | elementWithTargetTypes: [String]
13536 | fromId: [String]
13537 | fromRole: String
13538 | fromTypes: [String]
13539 | toId: [String]
13540 | toRole: String
13541 | toTypes: [String]
13542 | relationship_type: [String]
13543 | confidences: [Int]
13544 | search: String
13545 | filters: FilterGroup
13546 | dynamicFrom: FilterGroup
13547 | dynamicTo: FilterGroup
13548 | aggregateOnConnections: Boolean
13549 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13550 | stixRelationshipsNumber(
13551 | dateAttribute: String
13552 | authorId: String
13553 | noDirection: Boolean
13554 | endDate: DateTime
13555 | onlyInferred: Boolean
13556 | fromOrToId: [String]
13557 | elementWithTargetTypes: [String]
13558 | fromId: [String]
13559 | fromRole: String
13560 | fromTypes: [String]
13561 | toId: [String]
13562 | toRole: String
13563 | toTypes: [String]
13564 | relationship_type: [String]
13565 | confidences: [Int]
13566 | search: String
13567 | filters: FilterGroup
13568 | dynamicFrom: FilterGroup
13569 | dynamicTo: FilterGroup
13570 | ): Number @auth(for: [KNOWLEDGE, EXPLORE, SETTINGS_SETCUSTOMIZATION])
13571 | schemaRelationsTypesMapping: [StixRelationshipSchema!]! @auth
13572 | schemaRelationsRefTypesMapping: [StixRelationshipRefSchema!]! @auth
13573 | filterKeysSchema: [FilterKeysSchema!]! @auth
13574 |
13575 | ######## STIX CORE RELATIONSHIPS
13576 |
13577 | stixCoreRelationship(id: String): StixCoreRelationship @auth(for: [KNOWLEDGE])
13578 | stixCoreRelationships(
13579 | first: Int
13580 | after: ID
13581 | orderBy: StixCoreRelationshipsOrdering
13582 | orderMode: OrderingMode
13583 | fromOrToId: [String]
13584 | elementWithTargetTypes: [String]
13585 | fromId: [String]
13586 | fromRole: String
13587 | fromTypes: [String]
13588 | toId: [String]
13589 | toRole: String
13590 | toTypes: [String]
13591 | relationship_type: [String]
13592 | startTimeStart: DateTime
13593 | startTimeStop: DateTime
13594 | stopTimeStart: DateTime
13595 | stopTimeStop: DateTime
13596 | firstSeenStart: DateTime
13597 | firstSeenStop: DateTime
13598 | lastSeenStart: DateTime
13599 | lastSeenStop: DateTime
13600 | startDate: DateTime
13601 | endDate: DateTime
13602 | confidences: [Int]
13603 | search: String
13604 | filters: FilterGroup
13605 | stix: Boolean
13606 | ): StixCoreRelationshipConnection @auth(for: [KNOWLEDGE])
13607 | stixCoreRelationshipsTimeSeries(
13608 | field: String!
13609 | operation: StatsOperation!
13610 | startDate: DateTime!
13611 | endDate: DateTime
13612 | interval: String!
13613 | onlyInferred: Boolean
13614 | fromOrToId: [String]
13615 | elementWithTargetTypes: [String]
13616 | fromId: [String]
13617 | fromRole: String
13618 | fromTypes: [String]
13619 | toId: [String]
13620 | toRole: String
13621 | toTypes: [String]
13622 | relationship_type: [String]
13623 | confidences: [Int]
13624 | search: String
13625 | filters: FilterGroup
13626 | dynamicFrom: FilterGroup
13627 | dynamicTo: FilterGroup
13628 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13629 | stixCoreRelationshipsMultiTimeSeries(
13630 | operation: StatsOperation!
13631 | startDate: DateTime!
13632 | endDate: DateTime
13633 | interval: String!
13634 | onlyInferred: Boolean
13635 | timeSeriesParameters: [StixCoreRelationshipsTimeSeriesParameters]
13636 | ): [MultiTimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13637 | stixCoreRelationshipsDistribution(
13638 | field: String!
13639 | operation: StatsOperation!
13640 | startDate: DateTime
13641 | endDate: DateTime
13642 | dateAttribute: String
13643 | isTo: Boolean
13644 | limit: Int
13645 | order: String
13646 | fromOrToId: [String]
13647 | elementWithTargetTypes: [String]
13648 | fromId: [String]
13649 | fromRole: String
13650 | fromTypes: [String]
13651 | toId: [String]
13652 | toRole: String
13653 | toTypes: [String]
13654 | relationship_type: [String]
13655 | confidences: [Int]
13656 | search: String
13657 | filters: FilterGroup
13658 | dynamicFrom: FilterGroup
13659 | dynamicTo: FilterGroup
13660 | aggregateOnConnections: Boolean
13661 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13662 | stixCoreRelationshipsNumber(
13663 | dateAttribute: String
13664 | authorId: String
13665 | noDirection: Boolean
13666 | endDate: DateTime
13667 | onlyInferred: Boolean
13668 | fromOrToId: [String]
13669 | elementWithTargetTypes: [String]
13670 | fromId: [String]
13671 | fromRole: String
13672 | fromTypes: [String]
13673 | toId: [String]
13674 | toRole: String
13675 | toTypes: [String]
13676 | relationship_type: [String]
13677 | confidences: [Int]
13678 | search: String
13679 | filters: FilterGroup
13680 | dynamicFrom: FilterGroup
13681 | dynamicTo: FilterGroup
13682 | ): Number @auth(for: [KNOWLEDGE, EXPLORE])
13683 | stixCoreRelationshipsExportFiles(first: Int, exportContext: ExportContext!): FileConnection @auth(for: [KNOWLEDGE_KNGETEXPORT])
13684 |
13685 | ######## STIX SIGHTING RELATIONSHIPS
13686 |
13687 | stixSightingRelationship(id: String): StixSightingRelationship @auth(for: [KNOWLEDGE])
13688 | stixSightingRelationships(
13689 | first: Int
13690 | after: ID
13691 | orderBy: StixSightingRelationshipsOrdering
13692 | orderMode: OrderingMode
13693 | fromOrToId: String
13694 | fromId: StixRef
13695 | toId: StixRef
13696 | fromTypes: [String]
13697 | toTypes: [String]
13698 | firstSeenStart: DateTime
13699 | firstSeenStop: DateTime
13700 | lastSeenStart: DateTime
13701 | lastSeenStop: DateTime
13702 | search: String
13703 | filters: FilterGroup
13704 | toStix: Boolean
13705 | ): StixSightingRelationshipConnection @auth(for: [KNOWLEDGE])
13706 | stixSightingRelationshipsTimeSeries(
13707 | fromOrToId: String
13708 | fromId: StixRef
13709 | toId: StixRef
13710 | field: String!
13711 | operation: StatsOperation!
13712 | startDate: DateTime!
13713 | endDate: DateTime!
13714 | interval: String!
13715 | fromTypes: [String]
13716 | toTypes: [String]
13717 | search: String
13718 | filters: FilterGroup
13719 | ): [TimeSeries] @auth(for: [KNOWLEDGE, EXPLORE])
13720 | stixSightingRelationshipsDistribution(
13721 | fromOrToId: String
13722 | fromId: StixRef
13723 | toId: StixRef
13724 | field: String!
13725 | operation: StatsOperation!
13726 | startDate: DateTime
13727 | endDate: DateTime
13728 | dateAttribute: String
13729 | limit: Int
13730 | order: String
13731 | fromTypes: [String]
13732 | toTypes: [String]
13733 | search: String
13734 | filters: FilterGroup
13735 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13736 | stixSightingRelationshipsNumber(
13737 | dateAttribute: String
13738 | fromOrToId: String
13739 | fromId: StixRef
13740 | toId: StixRef
13741 | endDate: DateTime
13742 | fromTypes: [String]
13743 | toTypes: [String]
13744 | search: String
13745 | filters: FilterGroup): Number @auth(for: [KNOWLEDGE, EXPLORE])
13746 |
13747 | ######## STIX REF RELATIONSHIPS
13748 |
13749 | stixRefRelationship(id: String): StixRefRelationship @auth(for: [KNOWLEDGE])
13750 | stixRefRelationships(
13751 | first: Int
13752 | after: ID
13753 | orderBy: StixRefRelationshipsOrdering
13754 | orderMode: OrderingMode
13755 | fromOrToId: String
13756 | fromId: StixRef
13757 | toId: StixRef
13758 | fromTypes: [String]
13759 | toTypes: [String]
13760 | relationship_type: [String]
13761 | startTimeStart: DateTime
13762 | startTimeStop: DateTime
13763 | stopTimeStart: DateTime
13764 | stopTimeStop: DateTime
13765 | search: String
13766 | filters: FilterGroup
13767 | toStix: Boolean
13768 | ): StixRefRelationshipConnection @auth(for: [KNOWLEDGE])
13769 | stixNestedRefRelationships(
13770 | first: Int
13771 | after: ID
13772 | orderBy: StixRefRelationshipsOrdering
13773 | orderMode: OrderingMode
13774 | fromOrToId: String
13775 | fromId: StixRef
13776 | toId: StixRef
13777 | fromTypes: [String]
13778 | toTypes: [String]
13779 | relationship_type: [String]
13780 | startTimeStart: DateTime
13781 | startTimeStop: DateTime
13782 | stopTimeStart: DateTime
13783 | stopTimeStop: DateTime
13784 | search: String
13785 | filters: FilterGroup
13786 | toStix: Boolean
13787 | ): StixRefRelationshipConnection @auth(for: [KNOWLEDGE])
13788 | stixSchemaRefRelationships(
13789 | id: String
13790 | toType: String
13791 | ): DefinitionRefRelationship @auth(for: [KNOWLEDGE])
13792 | stixRefRelationshipsDistribution(
13793 | field: String!
13794 | operation: StatsOperation!
13795 | relationship_type: [String]
13796 | isTo: Boolean
13797 | toRole: String
13798 | toTypes: [String]
13799 | startDate: DateTime
13800 | endDate: DateTime
13801 | dateAttribute: String
13802 | limit: Int
13803 | order: String
13804 | ): [Distribution] @auth(for: [KNOWLEDGE, EXPLORE])
13805 | stixRefRelationshipsNumber(types: [String!], fromId: StixRef, endDate: DateTime): Number @auth(for: [KNOWLEDGE])
13806 |
13807 | ####### ALL
13808 | stixObjectOrStixRelationship(id: String!): StixObjectOrStixRelationship @auth(for: [KNOWLEDGE, EXPLORE])
13809 | stixObjectOrStixRelationships(
13810 | first: Int
13811 | after: ID
13812 | search: String
13813 | filters: FilterGroup
13814 | ): StixObjectOrStixRelationshipConnection @auth(for: [KNOWLEDGE, EXPLORE])
13815 | stixCoreObjectOrStixCoreRelationship(id: String!): StixCoreObjectOrStixCoreRelationship
13816 | @auth(for: [KNOWLEDGE, EXPLORE])
13817 | }
13818 |
13819 | ### SUBSCRIPTIONS
13820 |
13821 | type Subscription {
13822 | me: MeUser @auth
13823 | settings(id: ID!): Settings @auth(for: [SETTINGS_SETPARAMETERS])
13824 | settingsMessages(id: ID!): Settings @auth
13825 | group(id: ID!): Group @auth(for: [SETTINGS_SETACCESSES])
13826 | user(id: ID!): User @auth(for: [SETTINGS_SETACCESSES])
13827 | label(id: ID!): Label @auth(for: [SETTINGS_SETLABELS])
13828 | statusTemplate(id: ID!): StatusTemplate @auth(for: [SETTINGS_SETLABELS])
13829 | markingDefinition(id: ID!): MarkingDefinition @auth(for: [SETTINGS_SETMARKINGS])
13830 | killChainPhase(id: ID!): KillChainPhase @auth(for: [SETTINGS_SETLABELS])
13831 | stixCoreObject(id: ID!): StixCoreObject @auth(for: [KNOWLEDGE])
13832 | internalObject(id: ID!): InternalObject @auth(for: [SETTINGS]) @deprecated(reason: "[>=6.3 & <6.6]. Not used in the platform.")
13833 | stixDomainObject(id: ID!): StixDomainObject @auth(for: [KNOWLEDGE])
13834 | stixCyberObservable(id: ID!): StixCyberObservable @auth(for: [KNOWLEDGE])
13835 | stixCoreRelationship(id: ID!): StixCoreRelationship @auth(for: [KNOWLEDGE])
13836 | stixSightingRelationship(id: ID!): StixSightingRelationship @auth(for: [KNOWLEDGE])
13837 | stixRefRelationship(id: ID!): StixRefRelationship @auth(for: [KNOWLEDGE])
13838 | externalReference(id: ID!): ExternalReference @auth(for: [KNOWLEDGE])
13839 | }
13840 |
13841 | ### MUTATIONS
13842 |
13843 | ###### INTERNAL
13844 |
13845 | type WorkEditMutations {
13846 | delete: ID!
13847 | ping: ID!
13848 | reportExpectation(error: WorkErrorInput): ID!
13849 | addExpectations(expectations: Int): ID!
13850 | toReceived(message: String): ID!
13851 | toProcessed(message: String, inError: Boolean): ID!
13852 | }
13853 |
13854 | ######## INTERNAL OBJECT ENTITIES
13855 |
13856 | type SettingsEditMutations {
13857 | fieldPatch(input: [EditInput]!): Settings @auth(for: [SETTINGS_SETPARAMETERS, SETTINGS_SETACCESSES, SETTINGS_SECURITYACTIVITY])
13858 | contextPatch(input: EditContext): Settings @auth(for: [SETTINGS_SETPARAMETERS])
13859 | contextClean: Settings @auth(for: [SETTINGS_SETPARAMETERS])
13860 | editMessage(input: SettingsMessageInput!): Settings @auth(for: [SETTINGS_SETPARAMETERS])
13861 | deleteMessage(input: String!): Settings @auth(for: [SETTINGS_SETPARAMETERS])
13862 | }
13863 | type SubTypeEditMutations {
13864 | statusAdd(input: StatusAddInput!): SubType
13865 | statusFieldPatch(statusId: String!, input: [EditInput]!): SubType
13866 | statusDelete(statusId: String!): SubType
13867 | }
13868 | type GroupEditMutations {
13869 | delete: ID
13870 | fieldPatch(input: [EditInput]!): Group
13871 | contextPatch(input: EditContext): Group
13872 | contextClean: Group
13873 | relationAdd(input: InternalRelationshipAddInput!): InternalRelationship
13874 | relationDelete(fromId: StixRef, toId: StixRef, relationship_type: String!): Group
13875 | editDefaultMarking(input: DefaultMarkingInput!): Group
13876 | }
13877 | type UserEditMutations {
13878 | delete: ID
13879 | fieldPatch(input: [EditInput]!): User
13880 | contextPatch(input: EditContext): User
13881 | contextClean: User
13882 | tokenRenew: User @auth(for: [SETTINGS_SETACCESSES])
13883 | relationAdd(input: InternalRelationshipAddInput!): InternalRelationship
13884 | relationDelete(toId: StixRef!, relationship_type: String!): User
13885 | organizationAdd(organizationId: ID!): User
13886 | organizationDelete(organizationId: ID!): User
13887 | }
13888 | type RoleEditMutations {
13889 | delete: ID
13890 | fieldPatch(input: [EditInput]!): Role
13891 | contextPatch(input: EditContext): Role
13892 | contextClean: Role
13893 | relationAdd(input: InternalRelationshipAddInput!): InternalRelationship
13894 | relationDelete(toId: StixRef!, relationship_type: String!): Role
13895 | }
13896 | type AttributeEditMutations {
13897 | delete: ID
13898 | fieldPatch(input: [EditInput]!): Attribute
13899 | }
13900 |
13901 | type TaxiiCollectionEditMutations {
13902 | delete: ID
13903 | fieldPatch(input: [EditInput]!): TaxiiCollection
13904 | }
13905 |
13906 | type StreamCollectionEditMutations {
13907 | delete: ID
13908 | fieldPatch(input: [EditInput]!): StreamCollection
13909 | addGroup(id: ID!): StreamCollection
13910 | deleteGroup(id: ID!): StreamCollection
13911 | }
13912 |
13913 | type SynchronizerEditMutations {
13914 | delete: ID
13915 | fieldPatch(input: [EditInput]!): Synchronizer
13916 | }
13917 |
13918 | ######## STIX OBJECT
13919 | type StixEditMutations {
13920 | delete: ID
13921 | merge(stixObjectsIds: [String]!): StixObject
13922 | }
13923 |
13924 | ######## STIX OBJECT ENTITIES
13925 |
13926 | ######## STIX META OBJECT ENTITIES
13927 |
13928 | type MarkingDefinitionEditMutations {
13929 | delete: ID
13930 | fieldPatch(input: [EditInput]!): MarkingDefinition
13931 | contextPatch(input: EditContext): MarkingDefinition
13932 | contextClean: MarkingDefinition
13933 | }
13934 | type LabelEditMutations {
13935 | delete: ID
13936 | fieldPatch(input: [EditInput]!): Label
13937 | contextPatch(input: EditContext): Label
13938 | contextClean: Label
13939 | }
13940 | type ExternalReferenceEditMutations {
13941 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
13942 | fieldPatch(input: [EditInput]!): ExternalReference @auth(for: [KNOWLEDGE_KNUPDATE])
13943 | contextPatch(input: EditContext): ExternalReference @auth(for: [KNOWLEDGE_KNUPDATE])
13944 | contextClean: ExternalReference @auth(for: [KNOWLEDGE_KNUPDATE])
13945 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
13946 | relationDelete(fromId: StixRef!, relationship_type: String!): ExternalReference @auth(for: [KNOWLEDGE_KNUPDATE])
13947 | askEnrichment(connectorId: ID!): Work @auth(for: [KNOWLEDGE_KNENRICHMENT])
13948 | importPush(file: Upload!, fileMarkings: [String], version: DateTime, noTriggerImport: Boolean): File @auth(for: [KNOWLEDGE_KNUPLOAD])
13949 | }
13950 | type KillChainPhaseEditMutations {
13951 | delete: ID
13952 | fieldPatch(input: [EditInput]!): KillChainPhase
13953 | contextPatch(input: EditContext): KillChainPhase
13954 | contextClean: KillChainPhase
13955 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship
13956 | relationDelete(toId: StixRef!, relationship_type: String!): KillChainPhase
13957 | }
13958 |
13959 | ######## STIX CORE OBJECT ENTITIES
13960 |
13961 | enum AnalysisContentType {
13962 | fields
13963 | file
13964 | }
13965 |
13966 | union Analysis = MappingAnalysis
13967 |
13968 | input MappingAnalysisInput {
13969 | mappedEntities: [MappedEntityInput]
13970 | }
13971 |
13972 | type MappingAnalysis {
13973 | analysisType: String!
13974 | analysisStatus: State
13975 | analysisDate: DateTime
13976 | mappedEntities: [MappedEntity!]
13977 | }
13978 |
13979 | input MappedEntityInput {
13980 | matchedString: String!
13981 | matchedEntityId: String!
13982 | }
13983 |
13984 | type MappedEntity {
13985 | matchedString: String!
13986 | matchedEntity: StixCoreObject!
13987 | isEntityInContainer: Boolean!
13988 | }
13989 |
13990 | type StixCoreObjectEditMutations {
13991 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
13992 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
13993 | relationsAdd(input: StixRefRelationshipsAddInput!, commitMessage: String, references: [String]): StixCoreObject @auth(for: [KNOWLEDGE_KNUPDATE])
13994 | relationDelete(toId: StixRef!, relationship_type: String!, commitMessage: String, references: [String]): StixCoreObject @auth(for: [KNOWLEDGE_KNUPDATE])
13995 | restrictionOrganizationAdd(organizationId: ID!): StixCoreObject @auth(for: [KNOWLEDGE_KNUPDATE_KNORGARESTRICT])
13996 | restrictionOrganizationDelete(organizationId: ID!): StixCoreObject @auth(for: [KNOWLEDGE_KNUPDATE_KNORGARESTRICT])
13997 | askEnrichment(connectorId: ID!): Work @auth(for: [KNOWLEDGE_KNENRICHMENT])
13998 | askAnalysis(contentSource: String!, contentType: AnalysisContentType!, connectorId: ID): Work @auth(for: [KNOWLEDGE_KNUPDATE])
13999 | analysisPush(file: Upload!, contentSource: String!, contentType: AnalysisContentType!, analysisType: String!): File @auth(for: [CONNECTORAPI])
14000 | analysisClear(contentSource: String!, contentType: AnalysisContentType!): Boolean @auth(for: [KNOWLEDGE_KNUPDATE])
14001 | importPush(file: Upload!, fileMarkings: [String], version: DateTime, noTriggerImport: Boolean, fromTemplate: Boolean): File @auth(for: [KNOWLEDGE_KNUPLOAD])
14002 | exportAsk(input: ExportAskInput!): [File!] @auth(for: [KNOWLEDGE_KNGETEXPORT_KNASKEXPORT])
14003 | exportPush(file: Upload!): Boolean @auth(for: [CONNECTORAPI])
14004 | }
14005 |
14006 | ######## STIX DOMAIN OBJECT ENTITIES
14007 |
14008 | input StixDomainObjectFileEditInput {
14009 | id: String!
14010 | description: String
14011 | order: Int
14012 | inCarousel: Boolean
14013 | }
14014 |
14015 | type StixDomainObjectEditMutations {
14016 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14017 | changeType(newType: String!): StixDomainObject @auth(for: [KNOWLEDGE_KNUPDATE])
14018 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): StixDomainObject @auth(for: [KNOWLEDGE_KNUPDATE])
14019 | contextPatch(input: EditContext): StixDomainObject @auth(for: [KNOWLEDGE_KNUPDATE])
14020 | contextClean: StixDomainObject @auth(for: [KNOWLEDGE_KNUPDATE])
14021 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14022 | relationsAdd(input: StixRefRelationshipsAddInput!): StixDomainObject @auth(for: [KNOWLEDGE_KNUPDATE])
14023 | relationDelete(toId: StixRef!, relationship_type: String): StixDomainObject @auth(for: [KNOWLEDGE_KNUPDATE])
14024 | importPush(file: Upload!, fileMarkings: [String], version: DateTime, noTriggerImport: Boolean, fromTemplate: Boolean): File @auth(for: [KNOWLEDGE_KNUPLOAD])
14025 | exportAsk(input: ExportAskInput!): [File!] @auth(for: [KNOWLEDGE_KNGETEXPORT_KNASKEXPORT])
14026 | exportPush(file: Upload!, file_markings: [String]!): Boolean @auth(for: [CONNECTORAPI])
14027 | stixDomainObjectFileEdit(input: StixDomainObjectFileEditInput): StixDomainObject @auth(for: [KNOWLEDGE_KNUPDATE])
14028 | }
14029 | type AttackPatternEditMutations {
14030 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14031 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): AttackPattern @auth(for: [KNOWLEDGE_KNUPDATE])
14032 | contextPatch(input: EditContext): AttackPattern @auth(for: [KNOWLEDGE_KNUPDATE])
14033 | contextClean: AttackPattern @auth(for: [KNOWLEDGE_KNUPDATE])
14034 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14035 | relationDelete(toId: StixRef!, relationship_type: String!): AttackPattern @auth(for: [KNOWLEDGE_KNUPDATE])
14036 | }
14037 | type CampaignEditMutations {
14038 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14039 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Campaign @auth(for: [KNOWLEDGE_KNUPDATE])
14040 | contextPatch(input: EditContext): Campaign @auth(for: [KNOWLEDGE_KNUPDATE])
14041 | contextClean: Campaign @auth(for: [KNOWLEDGE_KNUPDATE])
14042 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14043 | relationDelete(toId: StixRef!, relationship_type: String!): Campaign @auth(for: [KNOWLEDGE_KNUPDATE])
14044 | }
14045 | ############### Containers
14046 | type ContainerEditMutations {
14047 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14048 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Container @auth(for: [KNOWLEDGE_KNUPDATE])
14049 | contextPatch(input: EditContext): Container @auth(for: [KNOWLEDGE_KNUPDATE])
14050 | contextClean: Container @auth(for: [KNOWLEDGE_KNUPDATE])
14051 | editAuthorizedMembers(input:[MemberAccessInput!]): Container @auth(for: [KNOWLEDGE_KNUPDATE_KNMANAGEAUTHMEMBERS])
14052 | relationAdd(input: StixRefRelationshipAddInput!, commitMessage: String, references: [String]): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14053 | relationDelete(toId: StixRef!, relationship_type: String!, commitMessage: String, references: [String]): Container @auth(for: [KNOWLEDGE_KNUPDATE])
14054 | investigationAdd: Workspace @auth(for: [KNOWLEDGE_KNUPDATE])
14055 | knowledgeAddFromInvestigation(workspaceId: ID!): Container @auth(for: [KNOWLEDGE_KNUPDATE])
14056 | }
14057 | type NoteEditMutations {
14058 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE, KNOWLEDGE_KNPARTICIPATE])
14059 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Note @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14060 | contextPatch(input: EditContext): Note @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14061 | contextClean: Note @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14062 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14063 | relationDelete(toId: StixRef!, relationship_type: String!): Note @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14064 | }
14065 | type ObservedDataEditMutations {
14066 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14067 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): ObservedData
14068 | @auth(for: [KNOWLEDGE_KNUPDATE])
14069 | contextPatch(input: EditContext): ObservedData @auth(for: [KNOWLEDGE_KNUPDATE])
14070 | contextClean: ObservedData @auth(for: [KNOWLEDGE_KNUPDATE])
14071 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14072 | relationDelete(toId: StixRef!, relationship_type: String!): ObservedData @auth(for: [KNOWLEDGE_KNUPDATE])
14073 | }
14074 | type OpinionEditMutations {
14075 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE, KNOWLEDGE_KNPARTICIPATE])
14076 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Opinion @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14077 | contextPatch(input: EditContext): Opinion @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14078 | contextClean: Opinion @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14079 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14080 | relationDelete(toId: StixRef!, relationship_type: String!): Opinion @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14081 | }
14082 | type ReportEditMutations {
14083 | delete(purgeElements: Boolean): ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14084 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Report @auth(for: [KNOWLEDGE_KNUPDATE])
14085 | contextPatch(input: EditContext): Report @auth(for: [KNOWLEDGE_KNUPDATE])
14086 | contextClean: Report @auth(for: [KNOWLEDGE_KNUPDATE])
14087 | relationAdd(input: StixRefRelationshipAddInput!, commitMessage: String, references: [String]): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14088 | relationDelete(toId: StixRef!, relationship_type: String!, commitMessage: String, references: [String]): Report @auth(for: [KNOWLEDGE_KNUPDATE])
14089 | }
14090 | type CourseOfActionEditMutations {
14091 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14092 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): CourseOfAction @auth(for: [KNOWLEDGE_KNUPDATE])
14093 | contextPatch(input: EditContext): CourseOfAction @auth(for: [KNOWLEDGE_KNUPDATE])
14094 | contextClean: CourseOfAction @auth(for: [KNOWLEDGE_KNUPDATE])
14095 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14096 | relationDelete(toId: StixRef!, relationship_type: String!): CourseOfAction @auth(for: [KNOWLEDGE_KNUPDATE])
14097 | }
14098 | ############### Identities
14099 | type IdentityEditMutations {
14100 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14101 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Identity @auth(for: [KNOWLEDGE_KNUPDATE])
14102 | contextPatch(input: EditContext): Identity @auth(for: [KNOWLEDGE_KNUPDATE])
14103 | contextClean: Identity @auth(for: [KNOWLEDGE_KNUPDATE])
14104 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14105 | relationDelete(toId: StixRef!, relationship_type: String!): Identity @auth(for: [KNOWLEDGE_KNUPDATE])
14106 | }
14107 | type IndividualEditMutations {
14108 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14109 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Individual @auth(for: [KNOWLEDGE_KNUPDATE])
14110 | contextPatch(input: EditContext): Individual @auth(for: [KNOWLEDGE_KNUPDATE])
14111 | contextClean: Individual @auth(for: [KNOWLEDGE_KNUPDATE])
14112 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14113 | relationDelete(toId: StixRef!, relationship_type: String!): Individual @auth(for: [KNOWLEDGE_KNUPDATE])
14114 | }
14115 | type SectorEditMutations {
14116 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14117 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Sector @auth(for: [KNOWLEDGE_KNUPDATE])
14118 | contextPatch(input: EditContext): Sector @auth(for: [KNOWLEDGE_KNUPDATE])
14119 | contextClean: Sector @auth(for: [KNOWLEDGE_KNUPDATE])
14120 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14121 | relationDelete(toId: StixRef!, relationship_type: String!): Sector @auth(for: [KNOWLEDGE_KNUPDATE])
14122 | }
14123 | type SystemEditMutations {
14124 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14125 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): System @auth(for: [KNOWLEDGE_KNUPDATE])
14126 | contextPatch(input: EditContext): System @auth(for: [KNOWLEDGE_KNUPDATE])
14127 | contextClean: System @auth(for: [KNOWLEDGE_KNUPDATE])
14128 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14129 | relationDelete(toId: StixRef!, relationship_type: String!): System @auth(for: [KNOWLEDGE_KNUPDATE])
14130 | }
14131 |
14132 | type InfrastructureEditMutations {
14133 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14134 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Infrastructure @auth(for: [KNOWLEDGE_KNUPDATE])
14135 | contextPatch(input: EditContext): Infrastructure @auth(for: [KNOWLEDGE_KNUPDATE])
14136 | contextClean: Infrastructure @auth(for: [KNOWLEDGE_KNUPDATE])
14137 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14138 | relationDelete(toId: StixRef!, relationship_type: String!): Infrastructure @auth(for: [KNOWLEDGE_KNUPDATE])
14139 | }
14140 | type IntrusionSetEditMutations {
14141 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14142 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): IntrusionSet @auth(for: [KNOWLEDGE_KNUPDATE])
14143 | contextPatch(input: EditContext): IntrusionSet @auth(for: [KNOWLEDGE_KNUPDATE])
14144 | contextClean: IntrusionSet @auth(for: [KNOWLEDGE_KNUPDATE])
14145 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14146 | relationDelete(toId: StixRef!, relationship_type: String!): IntrusionSet @auth(for: [KNOWLEDGE_KNUPDATE])
14147 | }
14148 | ############### Locations
14149 | type LocationEditMutations {
14150 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14151 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Location @auth(for: [KNOWLEDGE_KNUPDATE])
14152 | contextPatch(input: EditContext): Location @auth(for: [KNOWLEDGE_KNUPDATE])
14153 | contextClean: Location @auth(for: [KNOWLEDGE_KNUPDATE])
14154 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14155 | relationDelete(toId: StixRef!, relationship_type: String!): Location @auth(for: [KNOWLEDGE_KNUPDATE])
14156 | }
14157 | type CityEditMutations {
14158 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14159 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): City @auth(for: [KNOWLEDGE_KNUPDATE])
14160 | contextPatch(input: EditContext): City @auth(for: [KNOWLEDGE_KNUPDATE])
14161 | contextClean: City @auth(for: [KNOWLEDGE_KNUPDATE])
14162 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14163 | relationDelete(toId: StixRef!, relationship_type: String!): City @auth(for: [KNOWLEDGE_KNUPDATE])
14164 | }
14165 | type CountryEditMutations {
14166 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14167 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Country @auth(for: [KNOWLEDGE_KNUPDATE])
14168 | contextPatch(input: EditContext): Country @auth(for: [KNOWLEDGE_KNUPDATE])
14169 | contextClean: Country @auth(for: [KNOWLEDGE_KNUPDATE])
14170 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14171 | relationDelete(toId: StixRef!, relationship_type: String!): Country @auth(for: [KNOWLEDGE_KNUPDATE])
14172 | }
14173 | type RegionEditMutations {
14174 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14175 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Region @auth(for: [KNOWLEDGE_KNUPDATE])
14176 | contextPatch(input: EditContext): Region @auth(for: [KNOWLEDGE_KNUPDATE])
14177 | contextClean: Region @auth(for: [KNOWLEDGE_KNUPDATE])
14178 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14179 | relationDelete(toId: StixRef!, relationship_type: String!): Region @auth(for: [KNOWLEDGE_KNUPDATE])
14180 | }
14181 | type PositionEditMutations {
14182 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14183 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Position @auth(for: [KNOWLEDGE_KNUPDATE])
14184 | contextPatch(input: EditContext): Position @auth(for: [KNOWLEDGE_KNUPDATE])
14185 | contextClean: Position @auth(for: [KNOWLEDGE_KNUPDATE])
14186 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14187 | relationDelete(toId: StixRef!, relationship_type: String!): Position @auth(for: [KNOWLEDGE_KNUPDATE])
14188 | }
14189 | type MalwareEditMutations {
14190 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14191 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Malware @auth(for: [KNOWLEDGE_KNUPDATE])
14192 | contextPatch(input: EditContext): Malware @auth(for: [KNOWLEDGE_KNUPDATE])
14193 | contextClean: Malware @auth(for: [KNOWLEDGE_KNUPDATE])
14194 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14195 | relationDelete(toId: StixRef!, relationship_type: String!): Malware @auth(for: [KNOWLEDGE_KNUPDATE])
14196 | }
14197 | type ThreatActorGroupEditMutations {
14198 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14199 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): ThreatActorGroup @auth(for: [KNOWLEDGE_KNUPDATE])
14200 | contextPatch(input: EditContext): ThreatActorGroup @auth(for: [KNOWLEDGE_KNUPDATE])
14201 | contextClean: ThreatActorGroup @auth(for: [KNOWLEDGE_KNUPDATE])
14202 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14203 | relationDelete(toId: StixRef!, relationship_type: String!): ThreatActorGroup @auth(for: [KNOWLEDGE_KNUPDATE])
14204 | }
14205 | type ToolEditMutations {
14206 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14207 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Tool @auth(for: [KNOWLEDGE_KNUPDATE])
14208 | contextPatch(input: EditContext): Tool @auth(for: [KNOWLEDGE_KNUPDATE])
14209 | contextClean: Tool @auth(for: [KNOWLEDGE_KNUPDATE])
14210 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14211 | relationDelete(toId: StixRef!, relationship_type: String!): Tool @auth(for: [KNOWLEDGE_KNUPDATE])
14212 | }
14213 | type VulnerabilityEditMutations {
14214 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14215 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Vulnerability @auth(for: [KNOWLEDGE_KNUPDATE])
14216 | contextPatch(input: EditContext): Vulnerability @auth(for: [KNOWLEDGE_KNUPDATE])
14217 | contextClean: Vulnerability @auth(for: [KNOWLEDGE_KNUPDATE])
14218 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14219 | relationDelete(toId: StixRef!, relationship_type: String!): Vulnerability @auth(for: [KNOWLEDGE_KNUPDATE])
14220 | }
14221 | type IncidentEditMutations {
14222 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14223 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): Incident @auth(for: [KNOWLEDGE_KNUPDATE])
14224 | contextPatch(input: EditContext): Incident @auth(for: [KNOWLEDGE_KNUPDATE])
14225 | contextClean: Incident @auth(for: [KNOWLEDGE_KNUPDATE])
14226 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14227 | relationDelete(toId: StixRef!, relationship_type: String!): Incident @auth(for: [KNOWLEDGE_KNUPDATE])
14228 | }
14229 |
14230 | ######## STIX CYBER OBSERVABLE ENTITIES
14231 |
14232 | type StixCyberObservableEditMutations {
14233 | delete: ID @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14234 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): StixCyberObservable @auth(for: [KNOWLEDGE_KNUPDATE])
14235 | contextPatch(input: EditContext): StixCyberObservable @auth(for: [KNOWLEDGE_KNUPDATE])
14236 | contextClean: StixCyberObservable @auth(for: [KNOWLEDGE_KNUPDATE])
14237 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship @auth(for: [KNOWLEDGE_KNUPDATE])
14238 | relationsAdd(input: StixRefRelationshipsAddInput!): StixCyberObservable @auth(for: [KNOWLEDGE_KNUPDATE])
14239 | relationDelete(toId: StixRef!, relationship_type: String!): StixCyberObservable @auth(for: [KNOWLEDGE_KNUPDATE])
14240 | promoteToIndicator: Indicator @auth(for: [KNOWLEDGE_KNUPDATE])
14241 | importPush(file: Upload!, fileMarkings: [String], version: DateTime, noTriggerImport: Boolean): File @auth(for: [KNOWLEDGE_KNUPLOAD])
14242 | exportAsk(format: String!, exportType: String!, maxMarkingDefinition: String): [File!] @auth(for: [KNOWLEDGE_KNGETEXPORT_KNASKEXPORT])
14243 | exportPush(file: Upload!): Boolean @auth(for: [CONNECTORAPI])
14244 | }
14245 |
14246 | ######## STIX RELATIONSHIPS
14247 |
14248 | type StixRelationshipEditMutations {
14249 | delete: ID
14250 | }
14251 |
14252 | ######## STIX CORE RELATIONSHIPS
14253 |
14254 | type StixCoreRelationshipEditMutations {
14255 | delete: ID
14256 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): StixCoreRelationship
14257 | contextPatch(input: EditContext): StixCoreRelationship
14258 | contextClean: StixCoreRelationship
14259 | relationAdd(input: StixRefRelationshipAddInput!): StixRefRelationship
14260 | relationsAdd(input: StixRefRelationshipsAddInput!, commitMessage: String, references: [String]): StixCoreRelationship
14261 | relationDelete(toId: StixRef!, relationship_type: String!, commitMessage: String, references: [String]): StixCoreRelationship
14262 | restrictionOrganizationAdd(organizationId: ID!): StixCoreRelationship @auth(for: [KNOWLEDGE_KNUPDATE_KNORGARESTRICT])
14263 | restrictionOrganizationDelete(organizationId: ID!): StixCoreRelationship @auth(for: [KNOWLEDGE_KNUPDATE_KNORGARESTRICT])
14264 | }
14265 |
14266 | ######## STIX SIGHTING RELATIONSHIPS
14267 |
14268 | type StixSightingRelationshipEditMutations {
14269 | delete: ID
14270 | fieldPatch(input: [EditInput]!, commitMessage: String, references: [String]): StixSightingRelationship
14271 | contextPatch(input: EditContext): StixSightingRelationship
14272 | contextClean: StixSightingRelationship
14273 | relationAdd(input: StixRefRelationshipAddInput!): StixSightingRelationship
14274 | relationsAdd(input: StixRefRelationshipsAddInput!, commitMessage: String, references: [String]): StixSightingRelationship
14275 | relationDelete(toId: StixRef!, relationship_type: String!, commitMessage: String, references: [String]): StixSightingRelationship
14276 | restrictionOrganizationAdd(organizationId: ID!): StixSightingRelationship @auth(for: [KNOWLEDGE_KNUPDATE_KNORGARESTRICT])
14277 | restrictionOrganizationDelete(organizationId: ID!): StixSightingRelationship @auth(for: [KNOWLEDGE_KNUPDATE_KNORGARESTRICT])
14278 | }
14279 |
14280 | ######## STIX REF RELATIONSHIPS
14281 |
14282 | type StixRefRelationshipEditMutations {
14283 | delete: ID
14284 | fieldPatch(input: [EditInput]!): StixRefRelationship
14285 | contextPatch(input: EditContext): StixRefRelationship
14286 | }
14287 |
14288 | ### MUTATIONS DECLARATION
14289 |
14290 | type Mutation {
14291 | ###### INTERNAL
14292 | deleteImport(fileName: String): ID @auth(for: [KNOWLEDGE_KNASKIMPORT])
14293 | uploadImport(file: Upload!, fileMarkings: [String]): File @auth(for: [KNOWLEDGE_KNASKIMPORT])
14294 | uploadPending(file: Upload!, entityId: String, labels: [String], errorOnExisting: Boolean, refreshEntity: Boolean): File @auth(for: [KNOWLEDGE_KNASKIMPORT])
14295 | askJobImport(fileName: ID!, connectorId: String, configuration: String, bypassEntityId: String, bypassValidation: Boolean): File
14296 | @auth(for: [KNOWLEDGE_KNASKIMPORT])
14297 | resetFileIndexing: Boolean @auth(for: [SETTINGS_FILEINDEXING])
14298 |
14299 | ### SYNC
14300 | synchronizerAdd(input: SynchronizerAddInput!): Synchronizer @auth(for: [CONNECTORAPI])
14301 | synchronizerEdit(id: ID!): SynchronizerEditMutations @auth(for: [CONNECTORAPI])
14302 | synchronizerStart(id: ID!): Synchronizer @auth(for: [CONNECTORAPI])
14303 | synchronizerStop(id: ID!): Synchronizer @auth(for: [CONNECTORAPI])
14304 | synchronizerTest(input: SynchronizerAddInput): String @auth(for: [CONNECTORAPI, INGESTION_SETINGESTIONS])
14305 |
14306 | ### WORK
14307 | workAdd(connectorId: String!, friendlyName: String): Work! @auth(for: [CONNECTORAPI, MODULES_MODMANAGE, KNOWLEDGE_KNASKIMPORT, KNOWLEDGE_KNGETEXPORT_KNASKEXPORT])
14308 | workEdit(id: ID!): WorkEditMutations @auth(for: [CONNECTORAPI, MODULES_MODMANAGE])
14309 | workDelete(connectorId: String!): Boolean @auth(for: [CONNECTORAPI, MODULES_MODMANAGE])
14310 |
14311 | ### TASK
14312 | deleteBackgroundTask(id: ID!): ID! @auth
14313 | listTaskAdd(input: ListTaskAddInput!): BackgroundTask! @auth
14314 | queryTaskAdd(input: QueryTaskAddInput!): BackgroundTask! @auth
14315 |
14316 | ### RETENTION RULE
14317 | retentionRuleAdd(input: RetentionRuleAddInput!): RetentionRule! @auth(for: [SETTINGS_SETCUSTOMIZATION])
14318 | retentionRuleCheck(input: RetentionRuleAddInput): Int! @auth(for: [SETTINGS_SETCUSTOMIZATION])
14319 | retentionRuleEdit(id: ID!): RetentionRuleEditMutations @auth(for: [SETTINGS_SETCUSTOMIZATION])
14320 |
14321 | ### RULE
14322 | ruleSetActivation(id: ID!, enable: Boolean!): Rule! @auth(for: [SETTINGS_SETCUSTOMIZATION])
14323 | ruleManagerClean(eventId: ID): RuleManager! @auth(for: [SETTINGS_SETCUSTOMIZATION])
14324 |
14325 | ######## INTERNAL OBJECT ENTITIES
14326 | frontendErrorLog(message: String!, codeStack: String, componentStack: String): Boolean @auth
14327 | token(input: UserLoginInput): String @public # Use for login
14328 | otpActivation(input: UserOTPActivationInput): MeUser @auth
14329 | otpDeactivation: MeUser @auth
14330 | otpUserDeactivation(id: ID!): MeUser @auth(for: [SETTINGS_SETACCESSES])
14331 | otpLogin(input: UserOTPLoginInput): Boolean @auth @rateLimit(limit: 1, duration: 1)
14332 | settingsEdit(id: ID!): SettingsEditMutations @auth
14333 | subTypeEdit(id: ID!): SubTypeEditMutations @auth(for: [SETTINGS_SETCUSTOMIZATION])
14334 | statusTemplateAdd(input: StatusTemplateAddInput!): StatusTemplate! @auth(for: [SETTINGS_SETLABELS])
14335 | statusTemplateDelete(id: ID!): ID! @auth(for: [SETTINGS_SETLABELS])
14336 | statusTemplateFieldPatch(id: ID!, input: [EditInput!]!): StatusTemplate! @auth(for: [SETTINGS_SETLABELS])
14337 | statusTemplateContextPatch(id: ID!, input: EditContext!): StatusTemplate! @auth(for: [SETTINGS_SETLABELS])
14338 | statusTemplateContextClean(id: ID!): StatusTemplate! @auth(for: [SETTINGS_SETLABELS])
14339 | groupAdd(input: GroupAddInput!): Group @auth(for: [SETTINGS_SETACCESSES])
14340 | groupEdit(id: ID!): GroupEditMutations @auth(for: [SETTINGS_SETACCESSES])
14341 | userAdd(input: UserAddInput!): User @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
14342 | userEdit(id: ID!): UserEditMutations @auth(for: [SETTINGS_SETACCESSES, VIRTUAL_ORGANIZATION_ADMIN])
14343 | meTokenRenew: MeUser @auth
14344 | meEdit(input: [EditInput]!, password: String): MeUser @auth
14345 | bookmarkAdd(id: ID!, type: String!): StixDomainObject @auth(for: [KNOWLEDGE])
14346 | bookmarkDelete(id: ID!): ID @auth(for: [KNOWLEDGE])
14347 | logout: ID @auth
14348 | roleAdd(input: RoleAddInput!): Role @auth(for: [SETTINGS_SETACCESSES])
14349 | sessionKill(id: ID!): ID @auth(for: [SETTINGS_SETACCESSES])
14350 | userSessionsKill(id: ID!): [ID] @auth(for: [SETTINGS_SETACCESSES])
14351 | roleEdit(id: ID!): RoleEditMutations @auth(for: [SETTINGS_SETACCESSES])
14352 | pingConnector(id: ID!, state: String, connectorInfo: ConnectorInfoInput): Connector @auth(for: [CONNECTORAPI])
14353 | registerConnector(input: RegisterConnectorInput): Connector @auth(for: [CONNECTORAPI])
14354 | resetStateConnector(id: ID!): Connector @auth(for: [MODULES_MODMANAGE])
14355 | deleteConnector(id: ID!): ID! @auth(for: [MODULES_MODMANAGE])
14356 | updateConnectorTrigger(id: ID!, input: [EditInput]!): Connector @auth(for: [MODULES_MODMANAGE])
14357 | feedAdd(input: FeedAddInput!): Feed @auth(for: [TAXIIAPI_SETCOLLECTIONS])
14358 | feedDelete(id: ID!): ID! @auth(for: [TAXIIAPI_SETCOLLECTIONS])
14359 | feedEdit(id: ID!, input: FeedAddInput!): Feed! @auth(for: [TAXIIAPI_SETCOLLECTIONS])
14360 | taxiiCollectionAdd(input: TaxiiCollectionAddInput!): TaxiiCollection @auth(for: [TAXIIAPI_SETCOLLECTIONS])
14361 | taxiiCollectionEdit(id: ID!): TaxiiCollectionEditMutations @auth(for: [TAXIIAPI_SETCOLLECTIONS])
14362 | streamCollectionAdd(input: StreamCollectionAddInput!): StreamCollection @auth(for: [TAXIIAPI_SETCOLLECTIONS])
14363 | streamCollectionEdit(id: ID!): StreamCollectionEditMutations @auth(for: [TAXIIAPI_SETCOLLECTIONS])
14364 |
14365 | ######## STIX OBJECT
14366 | stixEdit(id: ID!): StixEditMutations @auth(for: [SETTINGS])
14367 |
14368 | ######## STIX OBJECT ENTITIES
14369 |
14370 | ######## STIX META OBJECT ENTITIES
14371 | markingDefinitionAdd(input: MarkingDefinitionAddInput!): MarkingDefinition @auth(for: [SETTINGS_SETMARKINGS])
14372 | markingDefinitionEdit(id: ID!): MarkingDefinitionEditMutations @auth(for: [SETTINGS_SETMARKINGS])
14373 | labelAdd(input: LabelAddInput!): Label @auth(for: [SETTINGS_SETLABELS])
14374 | labelEdit(id: ID!): LabelEditMutations @auth(for: [SETTINGS_SETLABELS])
14375 | externalReferenceAdd(input: ExternalReferenceAddInput!): ExternalReference @auth(for: [KNOWLEDGE_KNUPDATE])
14376 | externalReferenceEdit(id: ID!): ExternalReferenceEditMutations @auth
14377 | killChainPhaseAdd(input: KillChainPhaseAddInput!): KillChainPhase @auth(for: [SETTINGS_SETLABELS])
14378 | killChainPhaseEdit(id: ID!): KillChainPhaseEditMutations @auth(for: [SETTINGS_SETLABELS])
14379 |
14380 | ######## STIX CORE OBJECT ENTITIES
14381 | stixCoreObjectEdit(id: ID!): StixCoreObjectEditMutations @auth
14382 | stixCoreObjectsExportAsk(input: StixCoreObjectsExportAskInput!): [File!] @auth(for: [KNOWLEDGE_KNGETEXPORT_KNASKEXPORT])
14383 | stixCoreObjectsExportPush(entity_id: String, entity_type: String!, file: Upload!, file_markings: [String]!, listFilters: String): Boolean @auth(for: [CONNECTORAPI])
14384 |
14385 | ######## STIX DOMAIN OBJECT ENTITIES
14386 | stixBundlePush(connectorId: String!, bundle: String!): Boolean @auth(for: [CONNECTORAPI])
14387 | stixDomainObjectAdd(input: StixDomainObjectAddInput!): StixDomainObject @auth(for: [KNOWLEDGE_KNUPDATE])
14388 | stixDomainObjectEdit(id: ID!): StixDomainObjectEditMutations @auth
14389 | stixDomainObjectsExportAsk(
14390 | format: String!
14391 | exportType: String!
14392 | contentMaxMarkings: [String],
14393 | fileMarkings: [String]
14394 | search: String
14395 | exportContext: ExportContext
14396 | relationship_type: [String]
14397 | orderBy: StixDomainObjectsOrdering
14398 | orderMode: OrderingMode
14399 | filters: FilterGroup
14400 | selectedIds: [String]
14401 | ): [File!] @auth(for: [KNOWLEDGE_KNGETEXPORT_KNASKEXPORT])
14402 | stixDomainObjectsDelete(id: [ID]!): [ID]! @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE])
14403 | stixDomainObjectsExportPush(entity_id: String, entity_type: String!, file: Upload!, file_markings: [String]!, listFilters: String): Boolean @auth(for: [CONNECTORAPI])
14404 | attackPatternAdd(input: AttackPatternAddInput!): AttackPattern @auth(for: [KNOWLEDGE_KNUPDATE])
14405 | attackPatternEdit(id: ID!): AttackPatternEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14406 | campaignAdd(input: CampaignAddInput!): Campaign @auth(for: [KNOWLEDGE_KNUPDATE])
14407 | campaignEdit(id: ID!): CampaignEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14408 | ############### Containers
14409 | containerEdit(id: ID!): ContainerEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14410 | noteAdd(input: NoteAddInput!): Note @auth(for: [KNOWLEDGE_KNUPDATE])
14411 | userNoteAdd(input: NoteUserAddInput!): Note @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14412 | noteEdit(id: ID!): NoteEditMutations @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14413 | observedDataAdd(input: ObservedDataAddInput!): ObservedData @auth(for: [KNOWLEDGE_KNUPDATE])
14414 | observedDataEdit(id: ID!): ObservedDataEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14415 | opinionAdd(input: OpinionAddInput!): Opinion @auth(for: [KNOWLEDGE_KNUPDATE])
14416 | userOpinionAdd(input: OpinionUserAddInput!): Opinion @auth(for: [KNOWLEDGE_KNUPDATE, KNOWLEDGE_KNPARTICIPATE])
14417 | opinionEdit(id: ID!): OpinionEditMutations @auth(for: [KNOWLEDGE_KNUPDATE_KNDELETE, KNOWLEDGE_KNPARTICIPATE])
14418 | reportAdd(input: ReportAddInput!): Report @auth(for: [KNOWLEDGE_KNUPDATE])
14419 | reportEdit(id: ID!): ReportEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14420 | courseOfActionAdd(input: CourseOfActionAddInput!): CourseOfAction @auth(for: [KNOWLEDGE_KNUPDATE])
14421 | courseOfActionEdit(id: ID!): CourseOfActionEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14422 | ############### Identities
14423 | identityAdd(input: IdentityAddInput!): Identity @auth(for: [KNOWLEDGE_KNUPDATE])
14424 | identityEdit(id: ID!): IdentityEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14425 | individualAdd(input: IndividualAddInput!): Individual @auth(for: [KNOWLEDGE_KNUPDATE])
14426 | individualEdit(id: ID!): IndividualEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14427 | sectorAdd(input: SectorAddInput!): Sector @auth(for: [KNOWLEDGE_KNUPDATE])
14428 | sectorEdit(id: ID!): SectorEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14429 | systemAdd(input: SystemAddInput!): System @auth(for: [KNOWLEDGE_KNUPDATE])
14430 | systemEdit(id: ID!): SystemEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14431 | infrastructureAdd(input: InfrastructureAddInput!): Infrastructure @auth(for: [KNOWLEDGE_KNUPDATE])
14432 | infrastructureEdit(id: ID!): InfrastructureEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14433 | intrusionSetAdd(input: IntrusionSetAddInput!): IntrusionSet @auth(for: [KNOWLEDGE_KNUPDATE])
14434 | intrusionSetEdit(id: ID!): IntrusionSetEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14435 | ############### Locations
14436 | locationAdd(input: LocationAddInput!): Location @auth(for: [KNOWLEDGE_KNUPDATE])
14437 | locationEdit(id: ID!): LocationEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14438 | cityAdd(input: CityAddInput!): City @auth(for: [KNOWLEDGE_KNUPDATE])
14439 | cityEdit(id: ID!): CityEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14440 | countryAdd(input: CountryAddInput!): Country @auth(for: [KNOWLEDGE_KNUPDATE])
14441 | countryEdit(id: ID!): CountryEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14442 | regionAdd(input: RegionAddInput!): Region @auth(for: [KNOWLEDGE_KNUPDATE])
14443 | regionEdit(id: ID!): RegionEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14444 | positionAdd(input: PositionAddInput!): Position @auth(for: [KNOWLEDGE_KNUPDATE])
14445 | positionEdit(id: ID!): PositionEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14446 | malwareAdd(input: MalwareAddInput!): Malware @auth(for: [KNOWLEDGE_KNUPDATE])
14447 | malwareEdit(id: ID!): MalwareEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14448 | threatActorGroupAdd(input: ThreatActorGroupAddInput!): ThreatActorGroup @auth(for: [KNOWLEDGE_KNUPDATE])
14449 | threatActorGroupEdit(id: ID!): ThreatActorGroupEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14450 | toolAdd(input: ToolAddInput!): Tool @auth(for: [KNOWLEDGE_KNUPDATE])
14451 | toolEdit(id: ID!): ToolEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14452 | vulnerabilityAdd(input: VulnerabilityAddInput!): Vulnerability @auth(for: [KNOWLEDGE_KNUPDATE])
14453 | vulnerabilityEdit(id: ID!): VulnerabilityEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14454 | incidentAdd(input: IncidentAddInput!): Incident @auth(for: [KNOWLEDGE_KNUPDATE])
14455 | incidentEdit(id: ID!): IncidentEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14456 |
14457 | ######## STIX CYBER OBSERVABLE ENTITIES
14458 | stixCyberObservableAdd(
14459 | type: String!
14460 | stix_id: StixId
14461 | x_opencti_score: Int
14462 | x_opencti_description: String
14463 | createIndicator: Boolean
14464 | createdBy: String
14465 | objectMarking: [String]
14466 | objectLabel: [String]
14467 | objectOrganization: [String]
14468 | externalReferences: [String]
14469 | clientMutationId: String
14470 | update: Boolean
14471 | AutonomousSystem: AutonomousSystemAddInput
14472 | Directory: DirectoryAddInput
14473 | DomainName: DomainNameAddInput
14474 | EmailAddr: EmailAddrAddInput
14475 | EmailMessage: EmailMessageAddInput
14476 | EmailMimePartType: EmailMimePartTypeAddInput
14477 | Artifact: ArtifactAddInput
14478 | StixFile: StixFileAddInput
14479 | X509Certificate: X509CertificateAddInput
14480 | IPv4Addr: IPv4AddrAddInput
14481 | IPv6Addr: IPv6AddrAddInput
14482 | MacAddr: MacAddrAddInput
14483 | Mutex: MutexAddInput
14484 | NetworkTraffic: NetworkTrafficAddInput
14485 | Process: ProcessAddInput
14486 | Software: SoftwareAddInput
14487 | Url: UrlAddInput
14488 | UserAccount: UserAccountAddInput
14489 | WindowsRegistryKey: WindowsRegistryKeyAddInput
14490 | WindowsRegistryValueType: WindowsRegistryValueTypeAddInput
14491 | CryptographicKey: CryptographicKeyAddInput
14492 | CryptocurrencyWallet: CryptocurrencyWalletAddInput
14493 | Hostname: HostnameAddInput
14494 | Text: TextAddInput
14495 | UserAgent: UserAgentAddInput
14496 | BankAccount: BankAccountAddInput
14497 | Credential: CredentialAddInput
14498 | TrackingNumber: TrackingNumberAddInput
14499 | PhoneNumber: PhoneNumberAddInput
14500 | PaymentCard: PaymentCardAddInput
14501 | MediaContent: MediaContentAddInput
14502 | Persona: PersonaAddInput
14503 | ): StixCyberObservable @auth(for: [KNOWLEDGE_KNUPDATE])
14504 | stixCyberObservableEdit(id: ID!): StixCyberObservableEditMutations @auth
14505 | stixCyberObservablesExportAsk(input: StixCyberObservablesExportAskInput!): [File!] @auth(for: [KNOWLEDGE_KNGETEXPORT_KNASKEXPORT])
14506 | stixCyberObservablesExportPush(entity_id: String, entity_type: String!, file: Upload!, file_markings: [String]!, listFilters: String): Boolean @auth(for: [CONNECTORAPI])
14507 | artifactImport(
14508 | file: Upload!
14509 | x_opencti_description: String
14510 | createdBy: String
14511 | objectMarking: [String]
14512 | objectLabel: [String]
14513 | ): Artifact @auth(for: [KNOWLEDGE_KNUPDATE])
14514 |
14515 | ######## STIX RELATIONSHIPS
14516 | stixRelationshipEdit(id: ID!): StixRelationshipEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14517 |
14518 | ######## STIX CORE RELATIONSHIPS
14519 | stixCoreRelationshipAdd(input: StixCoreRelationshipAddInput, reversedReturn: Boolean): StixCoreRelationship
14520 | @auth(for: [KNOWLEDGE_KNUPDATE])
14521 | stixCoreRelationshipEdit(id: ID!): StixCoreRelationshipEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14522 | stixCoreRelationshipsExportAsk(input: StixCoreRelationshipsExportAskInput!): [File!] @auth(for: [KNOWLEDGE_KNGETEXPORT_KNASKEXPORT])
14523 | stixCoreRelationshipDelete(fromId: StixRef!, toId: StixRef!, relationship_type: String!): Boolean!
14524 | @auth(for: [KNOWLEDGE_KNUPDATE])
14525 | stixCoreRelationshipsExportPush(entity_id: String, entity_type: String!, file: Upload!, file_markings: [String]!, listFilters: String): Boolean @auth(for: [CONNECTORAPI])
14526 |
14527 | ######## STIX REF RELATIONSHIPS
14528 | stixRefRelationshipAdd(input: StixRefRelationshipAddInput!): StixRefRelationship
14529 | @auth(for: [KNOWLEDGE_KNUPDATE])
14530 | stixRefRelationshipEdit(id: ID!): StixRefRelationshipEditMutations
14531 | @auth(for: [KNOWLEDGE_KNUPDATE])
14532 |
14533 | ######## STIX SIGHTING RELATIONSHIPS
14534 | stixSightingRelationshipAdd(input: StixSightingRelationshipAddInput!): StixSightingRelationship
14535 | @auth(for: [KNOWLEDGE_KNUPDATE])
14536 | stixSightingRelationshipEdit(id: ID!): StixSightingRelationshipEditMutations @auth(for: [KNOWLEDGE_KNUPDATE])
14537 | }
14538 |
```