DRdruva
Threat Hunting

Get threat hunt summary for a specific threat hunt

View the scan summary for a specific threat hunt.

get/threathunting/v1/threathunts/{threatHuntID}/summary

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threathunting/v1/threathunts/{threatHuntID}/summary
  • Auth
    API key in header Authorization

Path parameters

threatHuntIDinteger required

Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.

Response

Success

threatHuntIDinteger

The identifier to uniquely identify threat hunt.

impactedResourcesinteger

Count of impacted resources against which threat was identified.

impactedDevicesinteger

Count of impacted devices against which threat was identified.

impactedSnapshotsinteger

Count of impacted snapshots against which threat was identified among all provided resources.

totalFilesImpactedinteger

Count of impacted files against which threat was identified among all provided resources.

totalResourcesinteger

Count of total resources provided during threat hunt creation.

totalDevicesinteger

Count of total devices provided during threat hunt creation.

totalSnapshotsinteger

Count of total snapshots that were included in the threat hunt scan.

scanStartedTimestring

The date and time when the threat hunt scan was started. Example - Aug 27, 2024 14:13:42.

scanCompletedTimestring

The date and time when the threat hunt scan was completed. Example - Aug 27, 2024 14:13:42.

scanStatusstring

The current status of the threat hunt scan. The status can be 'Running,' 'Queued,' 'Completed,' 'Cancelled,' or 'Failed'.

skippedIocsCountinteger

The count of file hashes skipped from the threat hunt scan.

errorCodestring

The error states that the threat hunt scan failed.

errorReasonstring

Details about the reason for the threat hunt scan failure.

Example response

{
  "scanStartedTime": "Aug 27, 2024 14:13:42",
  "scanCompletedTime": "Aug 27, 2024 14:13:42",
  "skippedIocsCount": 1,
  "errorCode": "THAnalyzer-1401",
  "errorReason": "Threat Hunt scan failed due to an internal error."
}

Changes

No recorded changes to this operation across all 1 revision of this API.