---
title: "Search for infected resources"
method: GET
path: "/ransomwarerecovery/v1/search/resource"
tags: ["Ransomware Recovery"]
---

# Search for infected resources

`GET /ransomwarerecovery/v1/search/resource`

## Request

- Base URL: `https://apis.druva.com/realize`
- URL: `https://apis.druva.com/realize/ransomwarerecovery/v1/search/resource`
- Auth: API key in header `Authorization`

Search for an infected resource like a device or any data source like NAS, File Server, and so on using the name of the resource.

## Query parameters

- `hostname` string, required
- `orgName` string
- `resourceType` 'Endpoint' | 'File Server' | 'NAS' | 'VMware' | 'OneDrive' | 'Google Drive' | 'SharePoint' | 'Shared Drive'
- `pageToken` string

## Response `200`

OK

- SearchResponse
  - `resources` object[]
    - `resourceID` integer: The unique ID of the resource in Druva Cloud.
    - `orgID` integer: The unique identifier of the Enterprise Workloads organization for the resource. Not applicable for Endpoints.
    - `resourceName` string: Specify the resource name to filter and list the specific resource name within Druva Cloud. Example - 'DOMAIN1234'.
    - `resourceParent` string: Name of the user in case of a device or Server Name in case of a backup set which is quarantined. Example for Devices - Ernie Carter
    - `resourceType` 'Endpoint' | 'File Server' | 'NAS': The type of resource. A resource can be one of the following types - Endpoint File Server NAS.
    - `resourceStatus` 'Enabled' | 'Disabled': The backup status of the resource in Druva Cloud. Status can be one of the following - Enabled - The resource is enabled for backup. Disabled - The resource is disabled for backup.
  - `nextPageToken` string: The token to access the next page of results. This parameter will be empty for the last page of results.
  - `isLast` boolean: An identifier to identify if the returned page is the last page of results. Value can be one of the following - True - Is last page of results. False - There are more results available. Use 'nextPageToken' value to get the next list of results.

## Other responses

- `400`: Bad Request
- `401`: The request either did not include an authentication token, or you have provided an expired authentication token.
- `404`: The requested resource was not found.
- `500`: Internal Server Error

---

[API](https://skmtc.dev/druva/apis/cyber-resilience.md) - [All operations](https://skmtc.dev/druva/apis/cyber-resilience/llms.txt) - [OpenAPI document](https://skmtc.dev/druva/apis/cyber-resilience/revisions/b149d46c996a?raw)