When querying across two points in time this describes the change in
the finding between the two points: CHANGED, UNCHANGED, ADDED, or
REMOVED. Findings can not be deleted, so REMOVED implies that the
finding at timestamp does not match the filter specified, but it did
at timestamp - compare_duration. If there was no compare_duration
supplied in the request the state change will be: UNUSED
Enums
Name
Description
UNUSED
State change is unused, this is the canonical default for this enum.
CHANGED
The finding has changed state in some way between the points in time and existed at both points.
UNCHANGED
The finding has not changed state between the points in time and existed at both points.
ADDED
The finding was created between the points in time.
REMOVED
The finding at timestamp does not match the filter specified, but it did at timestamp - compare_duration.