---
title: "Get Impacted Devices Statistics"
method: GET
path: "/threathunting/v1/threatwatch/impacteddevices/stats"
tags: ["Threat Watch"]
---

# Get Impacted Devices Statistics

`GET /threathunting/v1/threatwatch/impacteddevices/stats`

## Request

- Base URL: `https://apis.druva.com/realize`
- URL: `https://apis.druva.com/realize/threathunting/v1/threatwatch/impacteddevices/stats`
- Auth: API key in header `Authorization`

Get aggregated statistics for impacted devices showing breakdown by resource type and IOC set. This API provides total number of impacted resources and file matches, breakdown of impacted devices by resource type (VMware, EC2, AzureVM, OneDrive, SharePoint, Exchange Online), and breakdown of impacted devices by IOC set name (sorted by impact count in descending order).

## Query parameters

- `minTime` string, required
- `maxTime` string

## Response `200`

Success

- ThreatWatchImpactedDevicesStatsResponse
  - `totalImpactedResources` integer: Total number of impacted resources.
  - `totalFileMatches` integer: Total number of file matches across all impacted devices.
  - `impactByResourceType` object[]: Breakdown by resource type.
    - `resourceType` string: Resource type (VMware, EC2, AzureVM, OneDrive, SharePoint, ExchangeOnline).
    - `impactedDevices` integer: Number of impacted devices for this resource type.
  - `impactByIoC` object[]: Breakdown by IOC set (sorted by impact count in descending order).
    - `iocSetID` integer: IOC set identifier.
    - `iocSetName` string: IOC set name.
    - `impactedDevices` integer: Number of devices impacted by this IOC set.

## Other responses

- `400`: Bad Request
- `401`: The request either did not include an authentication token, or you have provided an expired authentication token.
- `404`: The requested resource was not found.
- `500`: Internal Server Error

---

[API](https://skmtc.dev/druva/apis/cyber-resilience.md) - [All operations](https://skmtc.dev/druva/apis/cyber-resilience/llms.txt) - [OpenAPI document](https://skmtc.dev/druva/apis/cyber-resilience/revisions/b149d46c996a?raw)