DRdruva
Threat Watch

Get Threat Watch device statistics

Provides comprehensive, device-level statistics for a specified device. The data includes: impacted snapshot counts; Total files impacted across all snapshots; Timestamps for the first and last impacted snapshots; Indicator of Compromise (IOC) sets that matched on the device.

get/threathunting/v1/threatwatch/devices/{deviceID}/stats

Request

  • Base URL
    https://apis.druva.com/realize
  • URL
    https://apis.druva.com/realize/threathunting/v1/threatwatch/devices/{deviceID}/stats
  • Auth
    API key in header Authorization

Path parameters

deviceIDinteger required

Specify the device ID. You can obtain the device ID using the 'List Threat Watch Device Results API'.

Query parameters

resourceType'vmware' | 'ec2' | 'azurevm' | 'onedrive' | 'sharepoint' | 'exchangeonline' required

Specify the resource type.

Response

Success

deviceIDinteger

Device identifier.

resourceIDsinteger[]

List of resource IDs associated with the device.

resourceTypestring

Resource type (VMware, EC2, AzureVM, OneDrive, SharePoint, ExchangeOnline).

impactedSnapshotsinteger

Number of impacted snapshots.

totalFilesImpactedinteger

Total files impacted across all snapshots.

firstImpactedSnapshotstring

ISO 8601 timestamp of first impacted snapshot.

lastImpactedSnapshotstring

ISO 8601 timestamp of last impacted snapshot.

Changes

No recorded changes to this operation across all 1 revision of this API.