Skip to main content
List all detections, with filtering options. A detection represents a security event or threat identified in your environment. Note: This action can be used once every 5 minutes. Every triggering events are limited to 50 per detection. Required scope :
  • read:detections
  • read:cloud_events_cloud
  • read:cloud_events_sensor
  • read:security_scans
External DocumentationTo learn more, visit the Wiz documentation.

​
Basic Parameters

ParameterDescription
CursorThe pagination cursor. You can use it to fetch the next page of detections. Take the retrieved cursor from the response under the data.detections.pageInfo.endCursor key.
Detection ID ContainA substring that can be contained in an ID to filter by.
Detection IDsA comma-separated list of detection IDs to filter by.
LimitNumber of records to fetch.
Project IDsA comma-separated list of project IDs to filter by.
Return All PagesAutomatically fetch all resources, page by page.
SeverityThe severity of detections to filter by.

​
Advanced Parameters

ParameterDescription
After Creation DateA timestamp used to filter results that were created after a specific point.
After End DateA timestamp used to filter results that ended after a specific point.
After Start DateA timestamp used to filter results that started after a specific point.
After Update DateA timestamp used to filter results that were updated after a specific point.
Before Creation DateA timestamp used to filter results that were created before a specific point.
Before End DateA timestamp used to filter results that ended before a specific point.
Before Start DateA timestamp used to filter results that started before a specific point.
Before Update DateA timestamp used to filter results that were updated before a specific point.
Order By DirectionThe direction to order the results by.
Order By FieldThe field to order the results by.

​
Workflow Library Example

List Detections with Wiz and Send Results Via Email
Workflow LibraryPreview this Workflow on desktop