DRdruva
Threat Watch

Get Threat Watch device details

Provides comprehensive details on impacted devices for Threat Watch. This API displays all details similar to the Threat Hunt API.

get/threathunting/v1/threatwatch/devices/{deviceID}

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threathunting/v1/threatwatch/devices/{deviceID}
  • Auth
    API key in header Authorization

Path parameters

deviceIDinteger required

Specify the device ID. You can obtain the device ID using the 'List Threat Watch Device Results API'.

Query parameters

resourceType'vmware' | 'ec2' | 'azurevm' | 'onedrive' | 'sharepoint' | 'exchangeonline' required

Specify the resource type.

Response

Success

deviceIDinteger

Device identifier.

resourceIDsinteger[]

List of resource IDs.

resourceNamestring

Resource name.

resourceURLstring

URL to resource in console.

resourceTypestring

Resource type (VMware, EC2, AzureVM, OneDrive, SharePoint, ExchangeOnline).

orgIDinteger

Organization ID.

orgNamestring

Organization name.

resourceParentIDinteger

Parent resource ID (e.g., vCenter, AWS Account).

resourceParentNamestring

Parent resource name.

payloadobject

Additional resource metadata.

Changes

No recorded changes to this operation across all 1 revision of this API.