get_entities_related_to_a_hunting_ruleset
Retrieve entities related to a hunting ruleset, such as matched files, to investigate potential threats.
Instructions
Retrieve entities related to the the given Hunting Ruleset.
The following table shows a summary of available relationships for Hunting ruleset objects.
Relationship | Return object type |
hunting_notification_files | Files that matched with the ruleset filters |
Args: ruleset_id (required): Hunting ruleset identifier. relationship_name (required): Relationship name. limit: Limit the number of entities to retrieve. 10 by default. Returns: List of objects related to the Hunting ruleset.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| ruleset_id | Yes | ||
| relationship_name | Yes | ||
| limit | No | ||
| api_key | No |
Output Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| result | Yes |