Ransomware Detection

List impacted resources

Provides a paginated list of resources impacted by ransomware detection. It consolidates multiple alerts per resource, prioritizing Encryption Detected alert over Suspicious Indicators alert, and allows filtering by resource name prefix, detection status, and resource type.

get/ransomiq/v1/resources/impacted

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/ransomiq/v1/resources/impacted
  • Auth
    API key in header Authorization

Query parameters

lastDaysinteger

The duration, in days, used for compiling the list of affected resources.

resourceType'VMware' | 'EC2' | 'AzureVM' | 'EBS Volume'

Filters the results by resource type. To specify multiple types, repeat the query parameter.

detectionStatus'encryptionDetected' | 'suspiciousIndicators'

Filters the results by detection status. For example, Encryption Detected or Suspicious Indicators.

resourceNamestring

Searches resource names by prefix (for instance, the prefix 'My' will match 'MyResource123')

pageTokenstring

The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.

pageSizeinteger

Specifies the quantity of resources to include per page.

sortOrder'asc' | 'desc'

The sequence in which items in the listing are sorted.

Response

OK

nextPageTokenstring
totalResourcesinteger

Changes

No recorded changes to this operation across all 1 revision of this API.