> For the complete documentation index, see [llms.txt](https://docs.ox.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.ox.security/api-documentation/api-reference/api--response-center/types/objects/extracted-incident-draft.md).

# extractedIncidentDraft

### Examples

```graphql
type ExtractedIncidentDraft {
  extractionToken: String
  name: String
  description: String
  type: IncidentType
  severity: IncidentSeverity
  publishedDate: String
  classification: IncidentClassification
  indicators: [ExtractedIndicator!]!
  confidence: String!
  sourceUrls: [String!]!
  sources: [ExtractionSourceResolution!]!
  unfilledFields: [String!]!
  warnings: [String!]!
}
```

### Fields

| Field                                                                                                                                           | Description                                                                                       | Supported fields                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                           |
| ----------------------------------------------------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| extractionToken `String`                                                                                                                        |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| name `String`                                                                                                                                   |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| description `String`                                                                                                                            |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| type [`IncidentType`](/api-documentation/api-reference/api--response-center/types/enums/incident-type.md)                                       |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| severity [`IncidentSeverity`](/api-documentation/api-reference/api--response-center/types/enums/incident-severity.md)                           |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| publishedDate `String`                                                                                                                          |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| classification [`IncidentClassification`](/api-documentation/api-reference/api--response-center/types/objects/incident-classification.md)       | Structured threat classification derived from the sources. Absent when no source establishes one. | <p>attackType <a href="/api-documentation/api-reference/api--response-center/types/enums/incident-attack-type.md"><code>IncidentAttackType</code></a><br>campaignName <code>String</code><br>primaryImpact <a href="/api-documentation/api-reference/api--response-center/types/enums/incident-impact.md"><code>IncidentImpact</code></a><br>secondaryImpacts <a href="/api-documentation/api-reference/api--response-center/types/enums/incident-impact.md"><code>\[IncidentImpact!]</code></a><br>impactTargets <a href="/api-documentation/api-reference/api--response-center/types/enums/incident-impact-target.md"><code>\[IncidentImpactTarget!]</code></a><br>capabilities <a href="/api-documentation/api-reference/api--response-center/types/enums/incident-capability.md"><code>\[IncidentCapability!]</code></a><br>executionTriggers <a href="/api-documentation/api-reference/api--response-center/types/enums/incident-execution-trigger.md"><code>\[IncidentExecutionTrigger!]</code></a><br>evidence <a href="/api-documentation/api-reference/api--response-center/types/objects/incident-classification-evidence.md"><code>IncidentClassificationEvidence</code></a><br>metadataContractVersion <code>String</code></p> |
| indicators [`[ExtractedIndicator!]!`](/api-documentation/api-reference/api--response-center/types/objects/extracted-indicator.md)               |                                                                                                   | <p>kind <a href="/api-documentation/api-reference/api--response-center/types/enums/indicator-kind.md"><code>IndicatorKind!</code></a><br>value <code>String!</code><br>versionRange <code>String</code><br>fixedVersions <code>\[String!]!</code><br>remediationStatus <a href="/api-documentation/api-reference/api--response-center/types/enums/indicator-remediation-status.md"><code>IndicatorRemediationStatus!</code></a><br>remediations <a href="/api-documentation/api-reference/api--response-center/types/objects/extracted-remediation.md"><code>\[ExtractedRemediation!]!</code></a><br>isCompromised <code>Boolean</code><br>isCompromisedBasis <code>String</code><br>infectsOnInstall <code>Boolean</code><br>ecosystem <code>String</code><br>severity <a href="/api-documentation/api-reference/api--response-center/types/enums/incident-severity.md"><code>IncidentSeverity</code></a><br>cvssScore <code>Float</code><br>cvssVersion <code>String</code><br>cveIntelligence <a href="/api-documentation/api-reference/api--response-center/types/objects/cve-intelligence.md"><code>CveIntelligence</code></a></p>                                                                                                    |
| confidence `String!`                                                                                                                            |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| sourceUrls `[String!]!`                                                                                                                         |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| sources [`[ExtractionSourceResolution!]!`](/api-documentation/api-reference/api--response-center/types/objects/extraction-source-resolution.md) |                                                                                                   | <p>url <code>String!</code><br>via <code>String!</code><br>ok <code>Boolean!</code><br>indicatorCount <code>Float</code></p>                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               |
| unfilledFields `[String!]!`                                                                                                                     |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |
| warnings `[String!]!`                                                                                                                           |                                                                                                   |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            |

### References

#### Mutations using this object:

* [<\~> extractIncidentFromUrls](/api-documentation/api-reference/api--response-center/mutations/extract-incident-from-urls.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.ox.security/api-documentation/api-reference/api--response-center/types/objects/extracted-incident-draft.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.