DRdruva
Threat Hunting

List all threat hunts

Displays a list of all the existing threat hunts.

get/threathunting/v1/threathunts

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threathunting/v1/threathunts
  • Auth
    API key in header Authorization

Query parameters

searchNamestring

Specify the name of the threat hunt to search and list all the threat hunts that match the name.

scanStatus[]string[]

Specify the scan status of the threat hunt to search and list the threat hunts based on scan statuses. The status can be 'Running', 'Queued', 'Completed', 'Cancelled', or 'Failed'.

resourceTypes[]string[]

Specify the resource types and list the threat hunts based on resource types. The resource types can be 'VMware', 'EC2', 'AzureVM', 'OneDrive', 'SharePoint', and 'ExchangeOnline'.

scanResult[]string[]

Specify the scan result of the threat hunt to search and list the threat hunts based on scan results. The scan result can either be 'File matches found' or 'File matches not found'.

pageTokenstring

The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.

Response

OK

nextPageTokenstring

The token to access the next page of results. This parameter will be empty for the last page of results.

totalItemsinteger

Total count of threat hunts created.

Example response

{
  "threathunts": [
    {
      "createdOn": "2020-01-02T15:04:05Z",
      "resourceTypes": [
        "VMware"
      ],
      "scanStartedTime": "Aug 27, 2024 14:13:42",
      "snapshotRangeEndDate": "2020-01-02T15:04:05Z",
      "snapshotRangeStartDate": "2020-01-02T15:04:05Z"
    }
  ]
}

Changes

No recorded changes to this operation across all 1 revision of this API.