Search for recently changed files.
External DocumentationTo learn more, visit the Lacework documentation.

​
Parameters

ParameterDescription
End TimeQuery for changed files until given timestamp.
Start TimeQuery for changed files since given timestamp.

​
Example Output

{
	"paging": {
		"rows": 5000,
		"totalRows": 654455,
		"urls": {
			"nextPage": "https://YourLacework.lacework.net/api/v2/Activities/ChangedFiles/AbcdEfgh123..."
		}
	},
	"data": [
		{
			"startTime": "2021-09-10T23:00:00Z",
			"endTime": "2021-09-11T00:00:00Z",
			"mid": 12345,
			"filePath": "/usr/bin/curl",
			"filedataHash": "d055afd3h16f11460b3549885a9u8a40f1905df1f9d83cf16gbfa8a3157c29ac",
			"mtime": "1631306708492",
			"size": 210944,
			"threatInfo": "null"
		},
		{
			"startTime": "2021-09-10T23:00:00Z",
			"endTime": "2021-09-11T00:00:00Z",
			"mid": 12345,
			"filePath": "/bin/sleep",
			"filedataHash": "ada88f7fd24bcdfdde10294c76968a335c2414ea7d43c5e3829b65cb037e90a4",
			"mtime": "1631317667570",
			"size": 0,
			"threatInfo": "null"
		}
	]
}

​
Workflow Library Example

Search Changed Files with Lacework and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop