Get InstaQuery

/instaqueries/v2{queryID}

—

https://protectapi.cylance.com/instaqueries/v2/AF593F38EDC1B743BDC0A6FCC53A03CE

HTTP/1.1 GET

This is the name of the InstaQuery.

This is the description of the InstaQuery.

This is the type of artifact to search. Possible values are "File", "Process", "NetworkConnection", and "RegistryKey".

This is the type of value (also known as a facet) to search. Possible values are dependent on the selected artifact type. Valid selections for each are as follows:

This is a list of strings to be matched against for the InstaQuery.

This determines whether to consider case sensitivity when matching values.

This determines whether or not to use an exact or "fuzzy" match. The default behavior of InstaQuery is to use a "fuzzy" match. Possible values are:

Fuzzy
Exact

This is a list of zone IDs to perform the InstaQuery against.

This is a list of filters when performing the InstaQuery.

This is the aspect (or type) of filters (for example, "OS").

This is the value to filter for (for example, "Windows").

This is a list of objects (for example, Focus View URLs) that are related to the InstaQuery. This is similar to the "Pivot Query" functionality in the Console.

This is the URL of the focus view that the InstaQuery relates to.

This is how the InstaQuery relates to the URL. This should almost always be "originated-from".

This is the unique identifier of the created InstaQuery.

This is the timestamp of when the InstaQuery was archived.

This determines if the InstaQuery has returned any results.

This is the date and time that the InstaQuery was created.

This is the progress of the InstaQuery.