--- title: GraphObjectTypeCategory enum | Wartiva GraphQL API description: High-level grouping used to organize GraphObjectType values in UI navigation and API discovery. Every GraphObjectType belongs to exactly one category. url: https://wartiva.com/api-docs/types/graph-object-type-category.html updated: 2026-10-07 --- Graph search · GraphQL enum # `GraphObjectTypeCategory` enum High-level grouping used to organize [GraphObjectType](https://wartiva.com/api-docs/types/graph-object-type.html) values in UI navigation and API discovery. Every [GraphObjectType](https://wartiva.com/api-docs/types/graph-object-type.html) belongs to exactly one category. ## Values | Enum Value | Description | |---|---| | `DEVICE` | Physical or virtual devices and their addressable surface — includes [Device](https://wartiva.com/api-docs/types/device.html), [DeviceManufacturer](https://wartiva.com/api-docs/types/device-manufacturer.html), [DeviceModel](https://wartiva.com/api-docs/types/device-model.html), [OpenPort](https://wartiva.com/api-docs/types/open-port.html), and [Service](https://wartiva.com/api-docs/types/service.html). | | `ENDPOINT` | A managed endpoint and its per-machine state — [Endpoint](https://wartiva.com/api-docs/types/endpoint.html), [Security](https://wartiva.com/api-docs/types/security.html), [SoftwareUpdatePreferences](https://wartiva.com/api-docs/types/software-update-preferences.html), [SystemSettings](https://wartiva.com/api-docs/types/system-settings.html), and [UserSystemSettings](https://wartiva.com/api-docs/types/user-system-settings.html). | | `ENDPOINT_POLICY` | Endpoint-scoped policy configuration observed on the machine — [AdministrativeTemplatesWindows](https://wartiva.com/api-docs/types/administrative-templates-windows.html), [AuditPolicy](https://wartiva.com/api-docs/types/audit-policy.html), and [LocalPolicies](https://wartiva.com/api-docs/types/local-policies.html). | | `IDENTITY_AND_ACCESS` | Identity providers, accounts, groups, and session activity — includes [AccountPolicy](https://wartiva.com/api-docs/types/account-policy.html), [ActiveDirectory](https://wartiva.com/api-docs/types/active-directory.html), [EndpointGroup](https://wartiva.com/api-docs/types/endpoint-group.html), [EndpointUser](https://wartiva.com/api-docs/types/endpoint-user.html), and [LogonSession](https://wartiva.com/api-docs/types/logon-session.html). | | `LOCATION` | Physical or logical locations and observed positioning — [Location](https://wartiva.com/api-docs/types/location.html) and [PositionSeen](https://wartiva.com/api-docs/types/position-seen.html). | | `NETWORK` | Networks, network reachability, and wireless topology — includes [Network](https://wartiva.com/api-docs/types/network.html), [NetworkPrefix](https://wartiva.com/api-docs/types/network-prefix.html), [Interface](https://wartiva.com/api-docs/types/interface.html), [Route](https://wartiva.com/api-docs/types/route.html), [ArpTableEntry](https://wartiva.com/api-docs/types/arp-table-entry.html), [WlanInterface](https://wartiva.com/api-docs/types/wlan-interface.html), [WlanInterfaceConnection](https://wartiva.com/api-docs/types/wlan-interface-connection.html), [WlanNetwork](https://wartiva.com/api-docs/types/wlan-network.html), and [WlanAccessPoint](https://wartiva.com/api-docs/types/wlan-access-point.html). | | `POLICY` | Wartiva-managed policy graph objects whose lifecycle is service-owned — [Rule](https://wartiva.com/api-docs/types/rule.html), [Finding](https://wartiva.com/api-docs/types/finding.html), and [Issue](https://wartiva.com/api-docs/types/issue.html). | | `PROGRAMS` | Installed software and executable artifacts — [Application](https://wartiva.com/api-docs/types/application.html), [ApplicationInstall](https://wartiva.com/api-docs/types/application-install.html), [ApplicationInstallUserSettings](https://wartiva.com/api-docs/types/application-install-user-settings.html), [Executable](https://wartiva.com/api-docs/types/executable.html), and [SystemService](https://wartiva.com/api-docs/types/system-service.html). | | `STORAGE` | Persistent storage and filesystem paths — [Disk](https://wartiva.com/api-docs/types/disk.html), [DiskMount](https://wartiva.com/api-docs/types/disk-mount.html), and [EndpointPath](https://wartiva.com/api-docs/types/endpoint-path.html). | ## Used by - [`GraphObjectTypeCategoryInfo`](https://wartiva.com/api-docs/types/graph-object-type-category-info.html) type: Describes a single GraphObjectTypeCategory together with the graph object types assigned to it. ## Related types - [`AccountPolicy`](https://wartiva.com/api-docs/types/account-policy.html) The local account password and lockout policy in effect on an Endpoint. - [`ActiveDirectory`](https://wartiva.com/api-docs/types/active-directory.html) The Active Directory (AD) domain membership and directory-binding configuration of an Endpoint. - [`AdministrativeTemplatesWindows`](https://wartiva.com/api-docs/types/administrative-templates-windows.html) The Group Policy Administrative Templates (ADMX) settings applied to a Windows Endpoint, read from the policy registry values those templates write. - [`Application`](https://wartiva.com/api-docs/types/application.html) A software product as an identity shared across an organization, independent of any one computer. - [`ApplicationInstall`](https://wartiva.com/api-docs/types/application-install.html) One installed copy of an application on one Endpoint. - [`ApplicationInstallUserSettings`](https://wartiva.com/api-docs/types/application-install-user-settings.html) The settings one EndpointUser has configured for one ApplicationInstall, so there is at most one object per user and install on an Endpoint. - [`ArpTableEntry`](https://wartiva.com/api-docs/types/arp-table-entry.html) One entry in an Endpoint's neighbor cache: the IPv4 Address Resolution Protocol (ARP) table and, where the operating system reports it, the IPv6… - [`AuditPolicy`](https://wartiva.com/api-docs/types/audit-policy.html) The security event auditing configuration of an Endpoint. - [`Device`](https://wartiva.com/api-docs/types/device.html) A physical or virtual device that does not run the Wartiva endpoint application but is visible on the network to a managed Endpoint, such as… - [`DeviceManufacturer`](https://wartiva.com/api-docs/types/device-manufacturer.html) A hardware vendor that made one or more discovered Device objects in an organization. - [`DeviceModel`](https://wartiva.com/api-docs/types/device-model.html) A specific product model, made by a DeviceManufacturer, that one or more discovered Device objects in an organization are instances of. - [`Disk`](https://wartiva.com/api-docs/types/disk.html) A physical disk drive attached to an Endpoint, identified on that Endpoint by its operating-system drive ID (for example \\.\PhysicalDrive0 on… - [`DiskMount`](https://wartiva.com/api-docs/types/disk-mount.html) A file system mounted on an Endpoint, identified by its device and mount point (for example C: on Windows or / on Linux and macOS). - [`Endpoint`](https://wartiva.com/api-docs/types/endpoint.html) A Windows, macOS, or Linux computer that runs the Wartiva endpoint agent and is enrolled with an organization. - [`EndpointGroup`](https://wartiva.com/api-docs/types/endpoint-group.html) An operating system or domain group observed on an Endpoint. - [`EndpointPath`](https://wartiva.com/api-docs/types/endpoint-path.html) The single graph object a PathSensor produces on an Endpoint, so an Endpoint has one EndpointPath per sensor that has reported data from it; list… - [`EndpointUser`](https://wartiva.com/api-docs/types/endpoint-user.html) An operating system or domain user account observed on an Endpoint. - [`Executable`](https://wartiva.com/api-docs/types/executable.html) A unique executable file observed running on an Endpoint, aggregating data across all observed processes that share the same file system path. - [`Finding`](https://wartiva.com/api-docs/types/finding.html) The record of a policy Rule evaluating FAIL against one graph object, such as an Endpoint, Device, or network service. - [`Interface`](https://wartiva.com/api-docs/types/interface.html) A network interface (physical, virtual, loopback, or tunnel) on an Endpoint, collected from Windows, macOS, and Linux endpoints as part of the… - [`Issue`](https://wartiva.com/api-docs/types/issue.html) The triage record for a policy violation: a security concern on one graph object that needs remediation or a decision. - [`LocalPolicies`](https://wartiva.com/api-docs/types/local-policies.html) The local security policy settings of an Endpoint. - [`Location`](https://wartiva.com/api-docs/types/location.html) A physical place identified by its global plus code (Open Location Code), with a street address resolved by reverse geocoding. - [`LogonSession`](https://wartiva.com/api-docs/types/logon-session.html) A user logon session observed on an Endpoint, identified by the username and the time the session started. - [`Network`](https://wartiva.com/api-docs/types/network.html) An IP network (subnet) that a managed Endpoint has been attached to, identified by its address range in CIDR notation and, for networks outside a… - [`NetworkPrefix`](https://wartiva.com/api-docs/types/network-prefix.html) A specific IP address together with its subnet prefix length (e.g. - [`OpenPort`](https://wartiva.com/api-docs/types/open-port.html) One TCP or UDP port at one IP address on a discovered Device, found by managed endpoints port-scanning the devices on their local networks and by… - [`PositionSeen`](https://wartiva.com/api-docs/types/position-seen.html) A geographic coordinate (latitude and longitude) where a managed Endpoint was observed, and the times it was seen there. - [`Route`](https://wartiva.com/api-docs/types/route.html) One entry in an Endpoint's IP routing table, collected from Windows, macOS, and Linux endpoints as part of the periodic network inventory. - [`Security`](https://wartiva.com/api-docs/types/security.html) The security posture of an Endpoint: its firewall, anti-malware and disk encryption state, summarized as per-component health ratings in Health. - [`Service`](https://wartiva.com/api-docs/types/service.html) A network service identified on a discovered Device: one protocol (such as HTTP, TLS, SSH, SMB, DNS, SNMP, IPP, mDNS, or UPnP) acting as a client or… - [`SoftwareUpdatePreferences`](https://wartiva.com/api-docs/types/software-update-preferences.html) The operating system update configuration of an Endpoint and the updates currently available to it. - [`SystemService`](https://wartiva.com/api-docs/types/system-service.html) A background service or daemon configured on an Endpoint. - [`SystemSettings`](https://wartiva.com/api-docs/types/system-settings.html) The machine-wide operating system configuration of an Endpoint. - [`UserSystemSettings`](https://wartiva.com/api-docs/types/user-system-settings.html) The per-user operating system configuration of one user account on an Endpoint, complementing the machine-wide SystemSettings. - [`WlanAccessPoint`](https://wartiva.com/api-docs/types/wlan-access-point.html) A Wi-Fi access point radio, identified by the network name (SSID) it broadcasts and its BSSID, as heard by managed endpoints scanning for nearby… - [`WlanInterface`](https://wartiva.com/api-docs/types/wlan-interface.html) A wireless LAN (Wi-Fi) adapter on an Endpoint, collected from Windows, macOS, and Linux endpoints by the periodic Wi-Fi inventory. - [`WlanNetwork`](https://wartiva.com/api-docs/types/wlan-network.html) A Wi-Fi network identified by its network name (SSID), visible to managed endpoints when they scan for nearby networks on Windows, macOS, or Linux. ## Example ### Example ```json "DEVICE" ``` --- Wartiva is in early access. Request access: https://wartiva.com/early-access.html All pages: https://wartiva.com/llms.txt