Graph search · GraphQL enum

GraphObjectTypeCategory enum

High-level grouping used to organize GraphObjectType values in UI navigation and API discovery. Every GraphObjectType belongs to exactly one category.

Values

Enum Value Description

DEVICE

 Physical or virtual devices and their addressable surface — includes Device, DeviceManufacturer, DeviceModel, OpenPort, and Service.

ENDPOINT

 A managed endpoint and its per-machine state — Endpoint, Security, SoftwareUpdatePreferences, SystemSettings, and UserSystemSettings.

ENDPOINT_POLICY

 Endpoint-scoped policy configuration observed on the machine — AdministrativeTemplatesWindows, AuditPolicy, and LocalPolicies.

IDENTITY_AND_ACCESS

 Identity providers, accounts, groups, and session activity — includes AccountPolicy, ActiveDirectory, EndpointGroup, EndpointUser, and LogonSession.

LOCATION

 Physical or logical locations and observed positioning — Location and PositionSeen.

NETWORK

 Networks, network reachability, and wireless topology — includes Network, NetworkPrefix, Interface, Route, ArpTableEntry, WlanInterface, WlanInterfaceConnection, WlanNetwork, and WlanAccessPoint.

POLICY

 Wartiva-managed policy graph objects whose lifecycle is service-owned — Rule, Finding, and Issue.

PROGRAMS

 Installed software and executable artifacts — Application, ApplicationInstall, ApplicationInstallUserSettings, Executable, and SystemService.

STORAGE

 Persistent storage and filesystem paths — Disk, DiskMount, and EndpointPath.

Used by

Related types

  • AccountPolicy The local account password and lockout policy in effect on an Endpoint.
  • ActiveDirectory The Active Directory (AD) domain membership and directory-binding configuration of an Endpoint.
  • AdministrativeTemplatesWindows The Group Policy Administrative Templates (ADMX) settings applied to a Windows Endpoint, read from the policy registry values those templates write.
  • Application A software product as an identity shared across an organization, independent of any one computer.
  • ApplicationInstall One installed copy of an application on one Endpoint.
  • ApplicationInstallUserSettings The settings one EndpointUser has configured for one ApplicationInstall, so there is at most one object per user and install on an Endpoint.
  • ArpTableEntry One entry in an Endpoint's neighbor cache: the IPv4 Address Resolution Protocol (ARP) table and, where the operating system reports it, the IPv6…
  • AuditPolicy The security event auditing configuration of an Endpoint.
  • Device A physical or virtual device that does not run the Wartiva endpoint application but is visible on the network to a managed Endpoint, such as…
  • DeviceManufacturer A hardware vendor that made one or more discovered Device objects in an organization.
  • DeviceModel A specific product model, made by a DeviceManufacturer, that one or more discovered Device objects in an organization are instances of.
  • Disk A physical disk drive attached to an Endpoint, identified on that Endpoint by its operating-system drive ID (for example \\.\PhysicalDrive0 on…
  • DiskMount A file system mounted on an Endpoint, identified by its device and mount point (for example C: on Windows or / on Linux and macOS).
  • Endpoint A Windows, macOS, or Linux computer that runs the Wartiva endpoint agent and is enrolled with an organization.
  • EndpointGroup An operating system or domain group observed on an Endpoint.
  • EndpointPath The single graph object a PathSensor produces on an Endpoint, so an Endpoint has one EndpointPath per sensor that has reported data from it; list…
  • EndpointUser An operating system or domain user account observed on an Endpoint.
  • Executable A unique executable file observed running on an Endpoint, aggregating data across all observed processes that share the same file system path.
  • Finding The record of a policy Rule evaluating FAIL against one graph object, such as an Endpoint, Device, or network service.
  • Interface A network interface (physical, virtual, loopback, or tunnel) on an Endpoint, collected from Windows, macOS, and Linux endpoints as part of the…
  • Issue The triage record for a policy violation: a security concern on one graph object that needs remediation or a decision.
  • LocalPolicies The local security policy settings of an Endpoint.
  • Location A physical place identified by its global plus code (Open Location Code), with a street address resolved by reverse geocoding.
  • LogonSession A user logon session observed on an Endpoint, identified by the username and the time the session started.
  • Network An IP network (subnet) that a managed Endpoint has been attached to, identified by its address range in CIDR notation and, for networks outside a…
  • NetworkPrefix A specific IP address together with its subnet prefix length (e.g.
  • OpenPort One TCP or UDP port at one IP address on a discovered Device, found by managed endpoints port-scanning the devices on their local networks and by…
  • PositionSeen A geographic coordinate (latitude and longitude) where a managed Endpoint was observed, and the times it was seen there.
  • Route One entry in an Endpoint's IP routing table, collected from Windows, macOS, and Linux endpoints as part of the periodic network inventory.
  • Security The security posture of an Endpoint: its firewall, anti-malware and disk encryption state, summarized as per-component health ratings in Health.
  • Service A network service identified on a discovered Device: one protocol (such as HTTP, TLS, SSH, SMB, DNS, SNMP, IPP, mDNS, or UPnP) acting as a client or…
  • SoftwareUpdatePreferences The operating system update configuration of an Endpoint and the updates currently available to it.
  • SystemService A background service or daemon configured on an Endpoint.
  • SystemSettings The machine-wide operating system configuration of an Endpoint.
  • UserSystemSettings The per-user operating system configuration of one user account on an Endpoint, complementing the machine-wide SystemSettings.
  • WlanAccessPoint A Wi-Fi access point radio, identified by the network name (SSID) it broadcasts and its BSSID, as heard by managed endpoints scanning for nearby…
  • WlanInterface A wireless LAN (Wi-Fi) adapter on an Endpoint, collected from Windows, macOS, and Linux endpoints by the periodic Wi-Fi inventory.
  • WlanNetwork A Wi-Fi network identified by its network name (SSID), visible to managed endpoints when they scan for nearby networks on Windows, macOS, or Linux.

Example

Example

"DEVICE"