indicators
Query threat intelligence records from GreyMatter using filters like severity, type, and last seen time to support incident response.
Instructions
Indicators · query indicators. Variables: after, filter, first, order. Example variables: {"after":"T18w","filter":{"feedNames":[""],"lastSeenAt":{"earliest":"2026-05-01T00:00:00.000Z","latest":"2026-05-01T00:00:00.000Z"},"names":[""],"severity":["CRITICAL"],"type":["CIDR"]},"first":10,"order":{"direction":"ASC","orderBy":"LAST_SEEN"}}
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| after | No | GraphQL: String | |
| first | No | GraphQL: Int | |
| order | No | GraphQL: IndicatorOrder | |
| filter | No | GraphQL: IndicatorFilter | |
| customer_slug | No | Override the x-reliaquest-customer (OpCo) header. |