Skip to content

This document provides details on the query order fields and directions that are supported by each provider for each operation. Orders can be used to specify the direction of the results of an operation, such as ordering by a specific field in ascending or descending order. If a provider or operation does not support ordering, it will not be listed here.

Query Applications

FieldCrowdStrike Falcon® Insight EDR[MOCK] CrowdStrike Falcon® Insight EDRMicrosoft Defender for EndpointThreatDown Endpoint Detection & ResponseSentinelOne Singularity™ EndpointSophos EndpointTanium EDR
product.nameasc, descasc, descasc, descasc, descasc, descasc, desc

Query Endpoints

FieldCrowdStrike Falcon® Insight EDR[MOCK] CrowdStrike Falcon® Insight EDRMicrosoft Defender for EndpointThreatDown Endpoint Detection & ResponseSentinelOne Singularity™ EndpointSophos EndpointTanium EDR
statusasc, descasc, desc
timeasc, descasc, descasc, desc