Security type | Wartiva GraphQL API

The security posture of an Endpoint: its firewall, anti-malware and disk encryption state, summarized as per-component health ratings in Health. Collected on Windows, macOS and Linux. All platforms report firewall products and per-volume disk encryption; Windows additionally reports antivirus and antispyware products and the Windows Firewall private and public profile settings, and Linux reports the nftables tables and chains that make up the host firewall. On macOS and Linux, health components that are not collected there, such as antivirus, are rated NOT_MONITORED. Each Endpoint has at most one Security, reachable from the Endpoint's security field.

Fields

Field Name	Description
`id` - `ID!`	The Security's unique identifier on the security graph.
`orgId` - `OrganizationId!`	Unique identifier that corresponds to your deployment of this product or a specific customer account that this Endpoint belongs to.
`seen` - `SeenOnline!`	Describes when this Security was seen.
`objectType` - `GraphObjectType!`	The type of this graph object.
`objectTypeLabel` - `String!`	A localized label describing the object type.
`displayName` - `String!`	A concise human-friendly identifier for this object suitable for display in user interface page titles and in AI chat responses that refer to the object.
`firstSeen` - `Time!`	Time this object was first seen.
`lastSeen` - `Time!`	Time this object was last seen.
`createdAt` - `Time!`	The time this object was created in the security graph.
`updatedAt` - `Time!`	The time this object was last mutated in the security graph.
`snapshotInfo` - `GraphObjectSnapshotInfo!`	Whether this object is a point-in-time snapshot of an object's state rather than the object's live state, and when that state was observed.
`endpoint` - `Endpoint`	The Endpoint this Security belongs to if available.
`firewallProducts` - `[Firewall!]!`	List of installed and configured firewall products on an Endpoint.
`firewallPrivateProfile` - `FirewallPrivateProfile`	Windows Firewall configuration settings for the Private network profile. Applies when the endpoint is connected to a private network (home or work).
`firewallPublicProfile` - `FirewallPublicProfile`	Windows Firewall configuration settings for the Public network profile. Applies when the endpoint is connected to a public network (coffee shop, airport).
`antivirusProducts` - `[Antivirus!]!`	List of installed and configured antivirus products on an Endpoint.
`antispywareProducts` - `[Antispyware!]!`	List of installed and configured antispyware products on an Endpoint.
`health` - `Health!`	Overall health status of various security components on an Endpoint.
`tables` - `[Table]`	List of nftable tables configured on a Linux Endpoint.
`diskEncryption` - `[DiskEncryption!]`	Encryption state of each disk volume, including its mount points, encryption method and encryption state.
`findings` - `FindingsPayload!`	Policy findings for this object.
Arguments `limit` - `Int` Maximum number of results to return. `skip` - `Int` Number of results to skip.
`issues` - `IssuesPayload!`	Policy issues for this object.
Arguments `limit` - `Int` Maximum number of results to return. `skip` - `Int` Number of results to skip.
`issuesSummary` - `IssuesSummary!`	Summary of the active policy issues currently open on this object, broken down by severity.

Returned by

security query: Retrieves an endpoint's Security posture by its graph object id: firewall, antivirus, and antispyware products, Windows Firewall profiles, Linux…

Used by

Endpoint type: A Windows, macOS, or Linux computer that runs the Wartiva endpoint agent and is enrolled with an organization.
GraphObjectType enum: An enumeration of the different types of security graph objects.
GraphObjectTypeCategory enum: High-level grouping used to organize GraphObjectType values in UI navigation and API discovery.
ProprietaryCheckId enum: A check that ships with the platform, run by a PROPRIETARY rule on its Schedule.
SecurityPayload type: Payload wrapper for a single Security result.

Related types

Endpoint A Windows, macOS, or Linux computer that runs the Wartiva endpoint agent and is enrolled with an organization.

Example

{
  "id": 4,
  "orgId": "615f3b3b28284380e28a7342",
  "seen": SeenOnline,
  "objectType": "ACCOUNT_POLICY",
  "objectTypeLabel": "abc123",
  "displayName": "xyz789",
  "firstSeen": "2021-10-07T18:23:25.829Z",
  "lastSeen": "2021-10-07T18:23:25.829Z",
  "createdAt": "2021-10-07T18:23:25.829Z",
  "updatedAt": "2021-10-07T18:23:25.829Z",
  "snapshotInfo": GraphObjectSnapshotInfo,
  "endpoint": Endpoint,
  "firewallProducts": [Firewall],
  "firewallPrivateProfile": FirewallPrivateProfile,
  "firewallPublicProfile": FirewallPublicProfile,
  "antivirusProducts": [Antivirus],
  "antispywareProducts": [Antispyware],
  "health": Health,
  "tables": [Table],
  "diskEncryption": [DiskEncryption],
  "findings": FindingsPayload,
  "issues": IssuesPayload,
  "issuesSummary": IssuesSummary
}