Use the search tokens below to search for controls being monitored. Looking for help with writing your query? click here
Example
Show findings with this account ID
account.id: 205767712438
Example
Show resources with this account alias
account.alias: Example_resource
Example
Show connectors with this subscription name
subscriptionName: Sample Cloud Subscription
Example
Show controls with this ID
cid: 205767712438
Example
Show controls with High criticality
control.criticality: HIGH
Examples
Show findings with this name
control.name: Avoid the use of the root account
Show any findings that contain parts of name
control.name: "Avoid the use of the root account"
Examples
Show controls that passed
control.result:PASS
Show controls that failed
control.result:FAIL
Examples
Show findings with this name
policy.name: CIS Amazon Web Services Foundations Benchmark
Show any findings that contain parts of name
policy.name: "CIS Amazon Web Services Foundations Benchmark"
Example
Find resources synced from Amazon AWS
provider:AWS
Examples
Show the misconfigured or vulnerable resources last fixed within certain dates
lastFixed: [2023-10-01 .. 2023-12-01]
Show the misconfigured or vulnerable resources last fixed starting 2023-01-01, ending 1 month ago
lastFixed: [2023-01-01 .. now-1m]
Show the misconfigured or vulnerable resources last fixed starting 2 weeks ago, ending 1 second ago
lastFixed: [now-2w .. now-1s]
Show the misconfigured or vulnerable resources last fixed on specific date
lastFixed: 2023-01-08
Examples
Show the misconfigured or vulnerable resources last reopened within certain dates
lastReopened: [2023-10-01 .. 2023-12-01]
Show the misconfigured or vulnerable resources last reopened starting 2023-01-01, ending 1 month ago
lastReopened: [2023-01-01 .. now-1m]
Show the misconfigured or vulnerable resources last reopened starting 2 weeks ago, ending 1 second ago
lastReopened: [now-2w .. now-1s]
Show the misconfigured or vulnerable resources last reopened on specific date
lastReopened: 2023-01-08
Example
Find resources in the Singapore region
region: Singapore, Singapore
Example
Show resources with ID acl-8e5198f5
resource.id: acl-8e5198f5
Example
Show findings with tenant ID
tenantId: ocid1.tenancy.oc1..aaaaaaaax2gwhq3hszjqhte5pgzijgyge6gvlsrqar6kxn7itwhk7keokamq
Example
Show resources of type Instance
resource.type: Instance
Example
Show resources that have PASS result from control evaluation.
resource.result: PASS
Example
Show service type VPC
service.type: VPC
Examples
Show resources discovered within certain dates
evaluatedOn: [2018-01-01 .. 2018-03-01]
Show resources updated starting 2018-10-01, ending 1 month ago
evaluatedOn: [2018-01-01 .. now-1m]
Show resources updated starting 2 weeks ago, ending 1 second ago
evaluatedOn: [now-2w .. now-1s]
Show resources discovered on specific date
evaluatedOn: 2018-01-08
Examples
Show the resources first evaluated within certain dates
firstEvaluatedOn: [2023-10-01 .. 2023-12-01]
Show the resources first evaluated starting 2023-01-01, ending 1 month ago
firstEvaluatedOn: [2023-01-01 .. now-1m]
Show the resources first evaluated starting 2 weeks ago, ending 1 second ago
firstEvaluatedOn: [now-2w .. now-1s]
Show the resources first evaluated on specific date
firstEvaluatedOn: 2023-01-08
Examples
Show the resources last evaluated within certain dates
lastEvaluatedOn: [2023-10-01 .. 2023-12-01]
Show resources last evaluated starting 2018-10-01, ending 1 month ago
lastEvaluatedOn: [2023-12-01 .. now-1m]
Show resources last evaluated starting 2 weeks ago, ending 1 second ago
lastEvaluatedOn: [now-2w .. now-1s]
Show resources last evaluated on specific date
lastEvaluatedOn: 2023-12-08
Examples
Show all the controls that belong to the Cloud Controls Matrix (CCM) mandate policy
mandate.name: Cloud Controls Matrix (CCM)
Examples
Show all the controls that belong to the Cloud Security Alliance (CSA) mandate publisher
mandate.publisher: Cloud Security Alliance
Examples
Show all the controls that belong to the AIS requirement section
requirement.section: AIS
Examples
Show all the controls that belong to the SC-7 control objective section
controlObjective.section: SC-7
Examples
Show all the controls that match the control objective comment saying Boundary Protection
controlObjective.comments: Boundary Protection
Examples
Show the policy that belong to specified unique ID
policy.uuid:80313390-aa04-11e9-9596-45e2d51410b1
Examples
Show all policies that are defined by user
policyType:User Defined
Example
Show connectors with this subscription ID
subscriptionId: fbb9ea64-abda-452e-adfa-83442409
Show connectors with this projectId
projectId: my-project-1513669048551
Example
Show policies or controls modified by the specified user
updatedBy: user_john
Example
Show exceptions with this name
exception.name: Sample_exception
Example
Show controls that are remediable
isRemediable: TRUE
Example
Show controls with success as the remediation status
remediationStatus: Success
Example
Show controls that are customizable
isCustomizable: true
Use a text value ##### to show controls created from QFlow with specified QFlow id.
Example
Show controls with specific qflow id
qflow.id: 80313390-aa04-11e9-9596-45e2d51410b1
Examples
Show controls that are created from QFlow with a name that partially matches the specified QFlow name.
qflow.name: "Publicly accessible S3 buckets"
Show controls that are created from QFlow with a name that exactly matches the specified QFlow name.
qflow.name: `S3 buckets`
Example
Show findings with account ID 205767712438 and type Subnet
account.id: 205767712438 and resource.type: Subnet
Example
Show findings that are not resource type Instance
not resource.type: Instance
Example
Show findings with one of these tag values
tag.value: Finance or tag.value: Accounting
Was this topic helpful?
requirement.commentsrequirement.comments
Use the name of requirement section to view all the controls that belong to the specified requirement section.
Examples
Show all the controls that belong to the Application & Interface Security requirement comment
requirement.comments: Application & Interface Security