Druva Cyber Resilience GovCloud API

The Cyber Resilience surface inside the Druva GovCloud boundary. Ransomware recovery, curated snapshots, threat hunting, threat intel, data anomalies and restore scans, served from govapis.druva.com/realize.

Operations 50

GET /ransomwarerecovery/v1/search/resource Search for infected resources
POST /ransomwarerecovery/v1/quarantineranges/resource/{resourceID} Quarantine snapshots on a resource - v1
GET /ransomwarerecovery/v1/quarantineranges Lists all quarantine ranges - v1
GET /ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID} Get details of a quarantine range - v1
PUT /ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID} Update the quarantine range - v1
DELETE /ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID} Delete a quarantine range - v1
GET /ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID} List all snapshots - v1
DELETE /ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}/snapshot/{snapshotID} Delete a snapshot - v1
GET /ransomwarerecovery/v2/quarantineranges Lists all resources with at least one quarantined snapshot, filtered by query parameters - v2
POST /ransomwarerecovery/v2/quarantineranges/resource/{resourceID} Creates provided quarantine ranges - v2
PUT /ransomwarerecovery/v2/quarantineranges/resource/{resourceID} Creates / Updates / Deletes provided quarantine ranges - v2
GET /ransomwarerecovery/v2/quarantineranges/resource/{resourceID} Lists details of specific resource ID which is present in quarantine bay - v2
GET /ransomwarerecovery/v2/snapshots/resource/{resourceID} Lists all snapshots quarantined for a given resource - v2
GET /uda/v1/stats/{workload}/resources/{resourceID} List snapshot statistics
GET /rwc/v1/settings Lists all the current settings.
PUT /rwc/v1/settings Save the current settings.
GET /rwcscanmaster/v1/jobs Lists all the Restore scans jobs.
GET /rwcscanmaster/v1/jobs/{JobID} Lists the details of Restore scans job.
GET /rwcscanmaster/v1/jobs/{JobID}/report Lists the details of the affected or skipped files in the Restore scans job.
GET /rwcscanmaster/v1/jobs/count List count of restore scan jobs
GET /eventmanagement/v1/events Lists all Realize Events. #
GET /eventmanagement/v1/events/tracker Lists specific events according to the tracker ID. #
POST /curatedsnapshot/v1/jobs Create a new Curated Snapshot.
GET /curatedsnapshot/v1/jobs List all the Curated Snapshot Jobs.
GET /curatedsnapshot/v1/jobs/{jobID} List the details of the Curated Snapshot job.
PUT /curatedsnapshot/v1/jobs/cancel Cancel the ongoing Curated Snapshot job.
GET /curatedsnapshot/v1/jobs/{JobID}/report Download Report of Curated Snapshot job.
GET /curatedsnapshot/v1/snapshots List all the Curated Snapshots.
DELETE /curatedsnapshot/v1/snapshots Delete the Curated Snapshot.
POST /threathunting/v1/search/backupset Search resources for VMware resource type
POST /threathunting/v1/threathunts Create a threat hunt
GET /threathunting/v1/threathunts List all threat hunts
PUT /threathunting/v1/threathunts/{threatHuntID}/cancel Cancel a threat hunt
DELETE /threathunting/v1/threathunts/{threatHuntID} Delete a threat hunt
GET /threathunting/v1/threathunts/{threatHuntID} List threat hunt configuration details
GET /threathunting/v1/threathunts/{threatHuntID}/summary Get threat hunt summary for a specific threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/devices Lists the devices that are a part of a Threat Hunt job.
GET /threathunting/v1/threathunts/{threatHuntID}/devices/stats List statistics of devices configured for threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID} Get resource details for a specific threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/stats Get device statistics for a specific threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/snapshots List impacted snapshots for a specific threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/report Download a report
GET /threatintel/v1/ioc-sets Listing of ioc sets #
POST /threatintel/v1/ioc-sets Creates a new IOC set. #
GET /threatintel/v1/ioc-sets/iocs Lists all the IOCs that matches the specified parameters. #
GET /threatintel/v1/ioc-sets/{iocsetid} Details of ioc set #
DELETE /threatintel/v1/ioc-sets/{iocsetid} Delete an existing IOC Set. #
PATCH /threatintel/v1/ioc-sets/{iocsetid} Updates existing IOC Set #
DELETE /threatintel/v1/ioc-sets/{iocsetid}/iocs Deletes IOCs from IOC Set #
GET /threatintel/v1/ioc/lookup Check if the specified IOC exists in any of the existing IOC Sets. #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/cyber-resilience-govcloud"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

druva-cyber-resilience-govcloud-openapi.json Raw ↑
{"openapi":"3.0.0","info":{"description":"","version":"3.0.0","title":"Cyber Resilience For GovCloud"},"tags":[{"name":"Ransomware Recovery","description":"List of APIs to get information and perform operations on ransomware affected resources managed in the Druva Cloud."},{"name":"Data Anomalies","description":"View a list of the resources managed in Druva Cloud detected with Data Anomalies."},{"name":"Restore scans","description":"List of APIs to get information and perform operations of Restore scans on the resources managed in Druva Cloud."},{"name":"Curated Snapshots","description":"List of APIs to get information of and manage the Curated Snapshots for the resources managed in Druva Cloud."},{"name":"Threat Hunting","description":"List of APIs to get information and perform operations on the resources managed in Druva Cloud for threat hunting."},{"name":"Threat Intel","description":"List of APIs to view details and manage IOC Sets in the IOC library."}],"paths":{"/ransomwarerecovery/v1/search/resource":{"get":{"tags":["Ransomware Recovery"],"summary":"Search for infected resources","description":"Search for an infected resource like a device using the name of the resource.","security":[{"Bearer":[]}],"parameters":[{"name":"hostname","in":"query","description":"Specify the complete name or a prefix from the device name by which you intend to search and list the devices. Example - “My” is the prefix in the device name “MyDevice123”.","required":true,"schema":{"type":"string"}},{"name":"orgName","in":"query","description":"Specify the complete name of an organization. For inSync workloads, this parameter is not applicable.","required":false,"schema":{"type":"string"}},{"name":"resourceType","in":"query","description":"Specify Resource Type for filtering.","required":false,"schema":{"type":"string","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/searchResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}":{"post":{"tags":["Ransomware Recovery"],"summary":"Quarantine snapshots on a resource - v1","description":"Quarantine all snapshots, or snapshots within a date range on a resource.\n:fa-info-circle: Users and administrators cannot restore or download data from the quarantined snapshots.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which the snapshots should be quarantined. \nGet the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeCreateRequest"}}},"description":"Required parameters for a quarantine range to be created."},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeCreateResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/quarantineranges":{"get":{"tags":["Ransomware Recovery"],"summary":"Lists all quarantine ranges - v1","description":"Returns the list of all the defined quarantined ranges for resources along with their details.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"searchString","in":"query","required":false,"description":"Specify the complete name or a prefix from the resource name by which you intend to search and list the resources. Example - “My” is the prefix in the resource name “MyResource123”.","schema":{"type":"string"}},{"name":"resourceParent","in":"query","required":false,"description":"Specify the complete name or a prefix from the resource parent's name by which you intend to search and list the resources. Example - “My” is the prefix in the resource parent's name “MyParent123”.","schema":{"type":"string"}},{"name":"fromDate","in":"query","required":false,"description":"Specify a date from which you want to list all the quarantined resources. Format - YYYY-MM-DD\nExample - 2020-10-25.\n:fa-info-circle: If you do not specify a date this will list all quarantined resources from January 06, 2020 (a system-defined limit).\nDruva uses UTC time zone to quarantine a resource. You must factor in the difference between the resource time zone and UTC zone while selecting the dates.","schema":{"type":"string"}},{"name":"toDate","in":"query","required":false,"description":"Specify a date till which you want to list all the quarantined resources. Format - YYYY-MM-DD\nExample - 2020-10-25.\n:fa-info-circle: If you do not specify a date this will list all quarantined resources till date.\nDruva uses UTC time zone to quarantine a resource. You must factor in the difference between the resource time zone and UTC zone while selecting the dates.","schema":{"type":"string"}},{"name":"resourceType[]","in":"query","required":false,"description":"This can be used to filter Quarantine ranges based on Resource Type. Multiple resource types can be selected at once.","style":"form","explode":false,"schema":{"type":"array","items":{"enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"integer"}},{"name":"orgID","in":"query","required":false,"description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","schema":{"type":"integer"}},{"name":"resourceName","in":"query","required":false,"description":"Specify the resource name to filter and list the specific resource name within Druva Cloud. Example - 'DOMAIN1234'.","schema":{"type":"string"}},{"name":"resourceID","in":"query","required":false,"description":"The unique ID of the quarantined resource on which the snapshots range needs to be updated. \n  Get the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeListResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID}":{"get":{"tags":["Ransomware Recovery"],"summary":"Get details of a quarantine range - v1","description":"Returns information about a quarantine range on an infected resource using the rangeID.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which you seek the quarantine range information. \n  Get the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique quarantine range ID for which you need the details. \nGet the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeGetResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}},"put":{"tags":["Ransomware Recovery"],"summary":"Update the quarantine range - v1","description":"Use this API to update the quarantine range for an infected resource.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the quarantined resource on which the snapshots range needs to be updated. \n  Get the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique quarantine range ID which needs the update. \nGet the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeUpdateRequest"}}},"description":"Required parameters for a quarantine range to be created."},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeCreateResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}},"delete":{"tags":["Ransomware Recovery"],"summary":"Delete a quarantine range - v1","description":"Deletes the quarantine range for an infected resource. When you delete a quarantine range, all the snapshots on the resource are again available for restore and download.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which the quarantine range should be deleted. \n  Get the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique quarantine range ID which needs to be deleted. \nGet the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"integer"}}],"responses":{"200":{"description":"OK"},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}":{"get":{"tags":["Ransomware Recovery"],"summary":"List all snapshots - v1","description":"Lists all the quarantined snapshots within a specified range on the resource.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which you want to list the quarantine snapshots. \n  Get the ID of a device using the 'List all devices' API. \nFor data sources like File Server, NAS, VMware refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique Quarantine range ID for which you need to list the quarantined snapshots. \n  Get the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"string"}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/snapshotListResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}/snapshot/{snapshotID}":{"delete":{"tags":["Ransomware Recovery"],"summary":"Delete a snapshot - v1","description":"Delete an infected snapshot using the snapshot ID.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which you want to delete a quarantined snapshot. \n  Get the ID of a device using the 'List all devices' API. \nFor data sources like File Server, NAS, VMware refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique ID of the quarantine range that includes the snapshot that you want to delete. \n  Get the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"integer"}},{"name":"snapshotID","in":"path","required":true,"description":"The unique snapshot ID which needs to be deleted.","schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/deleteSnapshotSchema"}}},"description":"The reason for deletion of the snapshot."},"responses":{"200":{"description":"OK"},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v2/quarantineranges":{"get":{"tags":["Ransomware Recovery"],"summary":"Lists all resources with at least one quarantined snapshot, filtered by query parameters - v2","description":"Lists all resources which have at least one quarantined snapshot and satisfy the filter criteria given by query parameters","parameters":[{"name":"searchString","in":"query","description":"Search string for filtering resources","schema":{"type":"string"}},{"name":"fromDate","in":"query","description":"Start date of quarantine range (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"toDate","in":"query","description":"End date of quarantine range (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"resourceTypes[]","in":"query","description":"List of resource types","schema":{"type":"string","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}},{"name":"pageToken","in":"query","description":"Token for pagination","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listQuarantinedResourcesResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/ransomwarerecovery/v2/quarantineranges/resource/{resourceID}":{"post":{"tags":["Ransomware Recovery"],"summary":"Creates provided quarantine ranges - v2","description":"Creates provided quarantine ranges for resources. While creating quarantine ranges, the API checks for overlapping ranges and displays an error if the overlapping ranges are present.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource for which you want to create a quarantine range.","schema":{"type":"integer"}}],"requestBody":{"$ref":"#/components/requestBodies/createQuarantineRangeV2RequestSchema"},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/createQuarantineRangeV2ResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}},"put":{"tags":["Ransomware Recovery"],"summary":"Creates / Updates / Deletes provided quarantine ranges - v2","description":"This API replaces all existing quarantine ranges for a resource with the provided ranges. To preserve existing ranges, retrieve them via a GET (/ransomwarerecovery/v2/quarantineranges) request before using this API. If no ranges are provided in the input, all existing ranges for the resource are deleted.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource that you want to quarantine.","schema":{"type":"integer"}}],"requestBody":{"$ref":"#/components/requestBodies/createQuarantineRangeV2RequestSchema"},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/createQuarantineRangeV2ResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}},"get":{"tags":["Ransomware Recovery"],"summary":"Lists details of specific resource ID which is present in quarantine bay - v2","description":"Retrieves detailed information for specific resource IDs within the quarantine Bay.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource that you want to retrieve.","schema":{"type":"string"}},{"name":"resourceType","in":"query","required":true,"description":"Type of the resource (for example, Endpoint).","schema":{"type":"string","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}},{"name":"orgID","in":"query","description":"The Phoenix organization ID for the resource. Not applicable for inSync workloads","schema":{"type":"integer","format":"int32"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listDetailsOfQuarantinedResourceResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/ransomwarerecovery/v2/snapshots/resource/{resourceID}":{"get":{"tags":["Ransomware Recovery"],"summary":"Lists all snapshots quarantined for a given resource - v2","description":"Lists all snapshots quarantined for a given resource.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"This API allows you to retrieve a snapshot list based on the unique ID of the resource.","schema":{"type":"string"}},{"name":"resourceType","in":"query","required":true,"description":"Type of the resource. For example, Endpoint.","schema":{"type":"string","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}},{"name":"orgId","in":"query","description":"The unique ID of the organization. To view a list of all the organizations, enter -1.","schema":{"type":"integer","format":"int32"}},{"name":"fromDate","in":"query","description":"Start date of the snapshot (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"toDate","in":"query","description":"End date of the snapshot (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"udaImpact","in":"query","description":"Indicates whether the resource is impacted by a Data Anomaly (UDA). True signifies impact, False indicates no impact.","schema":{"type":"boolean"}},{"name":"quarantineType[]","in":"query","required":false,"description":"The filters to list and view details based on the quarantine type. Example: manual or auto.","explode":true,"schema":{"type":"array","items":{"type":"string","enum":["auto","manual"]}}},{"name":"airGapType","in":"query","required":false,"description":"The filters to list and view details based on the backup type. Example: airgapped or nonairgapped.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listAllQuarantinedSnapshotsForResourceResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/uda/v1/stats/{workload}/resources/{resourceID}":{"get":{"tags":["Data Anomalies"],"summary":"List snapshot statistics","description":"Returns the snapshot statistics for a resource for which the Data Anomalies alert is generated. It displays the statistics for the last 30 days.","security":[{"Bearer":[]}],"parameters":[{"name":"workload","in":"path","description":"Specify the workload for which you want to view the statistics.","required":true,"schema":{"type":"string","enum":["fileserver","nas","endpoints","sharepoint","onedrive","vmware"]}},{"name":"resourceID","in":"path","description":"The unique ID of the resource for which you want to list and view all the anomalous snapshots. \n  Get the ID of a device using the 'List all devices' API. \n  For data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","required":true,"schema":{"type":"integer"}},{"name":"pageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","required":false,"schema":{"type":"integer"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listResourceCverStats"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/rwc/v1/settings":{"get":{"tags":["Restore scans"],"summary":"Lists all the current settings.","description":"Returns the details of the current settings of Restore scans.","security":[{"Bearer":[]}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SettingsResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}},"put":{"tags":["Restore scans"],"summary":"Save the current settings.","description":"Saves the current settings of Restore scans.","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SettingsRequest"}}},"description":"Required parameters for a default setting to be created for scan. To enable or disable the Anti Virus (AV) scan and File Hash scan settings as default."},"security":[{"Bearer":[]}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}}},"/rwcscanmaster/v1/jobs":{"get":{"tags":["Restore scans"],"security":[{"Bearer":[]}],"parameters":[{"name":"sortBy","in":"query","description":"Specify the parameter by which you intend to sort the listed results. Sorting can be done on basis of 'scanJobID', 'resourceType' parameters.","required":false,"schema":{"type":"string","enum":["scanJobID","status","resourceType"]}},{"name":"sortOrder","in":"query","description":"Specify the order by which you intend to sort and list the results. Sorting can be done in ascending or descending order.","required":false,"schema":{"type":"string","enum":["asc","desc"]}},{"name":"status[]","in":"query","description":"Specify the current status of the scan job to filter and list the jobs. The status can be 'Running', 'Queued', 'Successful', 'Cancelled' and 'Failed'","required":false,"style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Running","Queued","Successful","Cancelled","Failed"]}},{"name":"resourceType[]","in":"query","required":false,"description":"Specify the resource type to filter and list the data for the resource types. The resource type can be 'Endpoints', 'File Server', 'NAS', 'VMware'","style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Endpoints","File Server","NAS","VMware"]}},{"name":"resourceName","in":"query","description":"Specify the resource name to filter and list the data for that specific resource name within Druva Cloud. Example - 'DOMAIN1234'.","schema":{"type":"string"}},{"name":"startedIn","in":"query","required":false,"description":"Specify the time when the job was started.","schema":{"type":"string","enum":["Last 24 Hours","Last 7 Days","Last 1 Month"]}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"summary":"Lists all the Restore scans jobs.","description":"Returns the list of all Restore scans jobs.","responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/jobListModel"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}}},"/rwcscanmaster/v1/jobs/{JobID}":{"get":{"tags":["Restore scans"],"parameters":[{"name":"JobID","in":"path","description":"Specify the Restore scans job ID to view its details. Get the Restore scans job ID using 'Lists all the Restore scans jobs.' API.","required":true,"schema":{"type":"integer"}}],"security":[{"Bearer":[]}],"summary":"Lists the details of Restore scans job.","description":"Returns the details of Restore scans job.","responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/jobDetailsModel"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}}},"/rwcscanmaster/v1/jobs/{JobID}/report":{"get":{"tags":["Restore scans"],"security":[{"Bearer":[]}],"parameters":[{"name":"JobID","in":"path","required":true,"description":"Specify the Restore scans job ID to view details of affected or skipped files. Get the Restore scans job ID using 'Lists all the Restore scans job

# --- truncated at 32 KB (174 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/druva/refs/heads/main/openapi/druva-cyber-resilience-govcloud-openapi.json