list_entities
Retrieve detailed information about hosts and accounts in the Vectra AI platform using filters like entity type, state, priority, and tags to analyze security threats.
Instructions
List entities (hosts & accounts) in Vectra platform based on various filters. This tool returns entities with all their detailed information.
Returns:
str: Formatted string with list of detections.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| entity_type | Yes | Select type of entity to retrieve. Options are 'account' or 'host'. | |
| state | No | Filter by entity state (active, inactive) | active |
| ordering | No | Order by 'urgency_score', '-urgency_score', 'last_detection_timestamp', '-last_detection_timestamp', 'last_modified_timestamp', '-last_modified_timestamp', 'name', '-name'. The '-' prefix indicates descending order. | urgency_score |
| name | No | Filter by entity name. Can also perform partial word match. | |
| host_ip | No | Filter by entity IP address. Only applicable for host entities. | |
| is_prioritized | No | Filter for prioritized entities or non-prioritized entities. Defaults to True to return only prioritized entities. | |
| tags | No | Filter for entities with a particular tag | |
| limit | No | Maximum number of detections to return in the batch. None means no limit |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |