Start hunt job

post

{scheme}://{server}/v0/hunt-jobs

Start a hunt job

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

name

string | null

Name of the hunt job.

private

boolean

Restrict hunt job visibility to admins only.

range_end_time

date-time

required

Exclusive end datetime of the hunt job, in UTC using the ISO 8601 format (e.g., '2021-03-14T15:09:26Z').

range_start_time

date-time

required

Inclusive start datetime of the hunt job, in UTC using the ISO 8601 format (e.g., '2021-03-14T15:09:26Z').

source

string

required

MQL source of the hunt job.

triage_email_bomb

boolean

Pre-filters to only include messages that are contained in an email bomb. Combined with triage_reported, triage_flagged, and triage_dlp_rule_matched with a logical OR.

triage_flagged

boolean

Pre-filters to only includes flagged messages. Combined with triage_reported, triage_email_bomb, and triage_dlp_rule_matched with a logical OR.

triage_reported

boolean

Pre-filters to only includes user-reported messages. Combined with triage_flagged, triage_email_bomb, and triage_dlp_rule_matched with a logical OR.

Response

Language

Credentials

Bearer

URL

Loading…

Response

Choose an example:

application/json

201Created