Sample AppSync API to query forensic details - Automated Forensics Orchestrator for Amazon EC2 and EKS

Sample AppSync API to query forensic details

To query forensic information, AppSync provides the following queries.

Query Description

allForensicRecords

Gets all the forensic records. It can be filtered by:

* awsAccountId * awsRegion * completionTime * creationTime * diskAnalysisStatus * diskAnalysisStatusDescription * id * lastUpdatedTime * memoryAnalysisStatus * memoryAnalysisStatusDescription * resourceId * resourceInfo * resourceType * triageStatus * triageStatusDescription

getForensicRecord

Gets all forensic records based on ForensicID

listForensicRecordsForAccount

Lists forensic records by account.

listForensicRecordsForRegion

Lists forensic records by account and Region.

listForensicRecordsForResource

Lists forensic records by account, Region and ResourceType.

timelineEventsForRecord

Gets timeline of events by ForensicID.