DRdruva
Threat Hunting

List impacted snapshots for a specific threat hunt

Displays a list of impacted snapshots for the selected device ID and resource type for a specific threat hunt.

get/threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/snapshots

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/snapshots
  • Auth
    API key in header Authorization

Path parameters

threatHuntIDinteger required

Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.

deviceIDinteger required

Specify the device ID. You can obtain the device ID using the 'List threat hunt devices API'.

Query parameters

resourceType'VMware' | 'EC2' | 'AzureVM' | 'OneDrive' | 'SharePoint' | 'ExchangeOnline' required

Name of the resource type. The resource type can be 'VMware', 'EC2', 'AzureVM', 'OneDrive', 'SharePoint', or Exchange Online.

pageTokenstring

The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.

Response

Success

threatHuntIDinteger

The identifier to uniquely identify threat hunt.

deviceIDinteger

Unique identifier for a device.

resourceTypestring

Name of resource type. The resource types can be 'VMware', 'EC2', 'AzureVM', 'OneDrive', 'SharePoint', or Exchange Online.

totalSnapshotsinteger

Count of total snapshots for this resource.

nextPageTokenstring

The token to access the next page of results. This parameter will be empty for the last page of results.

Example response

{
  "snapshots": [
    {
      "snapshotID": "Mjk4OC1GcmkgTm92IDIyIDExOjEzOjU5IDIwMTk=",
      "snapshotName": "Nov 21 2019, 14:39:34"
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.