# Druva Cyber Resilience GovCloud API

**Canonical:** https://apis.io/apis/druva/cyber-resilience-govcloud/  
**Provider:** Druva — https://apis.io/providers/druva/  
**Base URL:** https://govapis.druva.com/realize  
**Documentation:** https://developer.druva.com

Druva Cyber Resilience GovCloud API is one of 21 APIs that [Druva](https://apis.io/providers/druva/) publishes on the [APIs.io](https://apis.io/) network, described by a machine-readable OpenAPI specification. Tagged areas include Cyber Resilience, GovCloud, Ransomware Recovery, Threat Hunting, and Threat Intel. The published artifact set on APIs.io includes an OpenAPI specification and API documentation.

The Cyber Resilience surface inside the Druva GovCloud boundary. Ransomware recovery, curated snapshots, threat hunting, threat intel, data anomalies and restore scans, served from govapis.druva.com/realize.

## Operations (50)

| Method | Path | Summary |
|---|---|---|
| GET | `/ransomwarerecovery/v1/search/resource` | Search for infected resources |
| POST | `/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}` | Quarantine snapshots on a resource - v1 |
| GET | `/ransomwarerecovery/v1/quarantineranges` | Lists all quarantine ranges - v1 |
| GET | `/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID}` | Get details of a quarantine range - v1 |
| PUT | `/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID}` | Update the quarantine range - v1 |
| DELETE | `/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID}` | Delete a quarantine range - v1 |
| GET | `/ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}` | List all snapshots - v1 |
| DELETE | `/ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}/snapshot/{snapshotID}` | Delete a snapshot - v1 |
| GET | `/ransomwarerecovery/v2/quarantineranges` | Lists all resources with at least one quarantined snapshot, filtered by query parameters - v2 |
| POST | `/ransomwarerecovery/v2/quarantineranges/resource/{resourceID}` | Creates provided quarantine ranges - v2 |
| PUT | `/ransomwarerecovery/v2/quarantineranges/resource/{resourceID}` | Creates / Updates / Deletes provided quarantine ranges - v2 |
| GET | `/ransomwarerecovery/v2/quarantineranges/resource/{resourceID}` | Lists details of specific resource ID which is present in quarantine bay - v2 |
| GET | `/ransomwarerecovery/v2/snapshots/resource/{resourceID}` | Lists all snapshots quarantined for a given resource - v2 |
| GET | `/uda/v1/stats/{workload}/resources/{resourceID}` | List snapshot statistics |
| GET | `/rwc/v1/settings` | Lists all the current settings. |
| PUT | `/rwc/v1/settings` | Save the current settings. |
| GET | `/rwcscanmaster/v1/jobs` | Lists all the Restore scans jobs. |
| GET | `/rwcscanmaster/v1/jobs/{JobID}` | Lists the details of Restore scans job. |
| GET | `/rwcscanmaster/v1/jobs/{JobID}/report` | Lists the details of the affected or skipped files in the Restore scans job. |
| GET | `/rwcscanmaster/v1/jobs/count` | List count of restore scan jobs |
| GET | `/eventmanagement/v1/events` | Lists all Realize Events. |
| GET | `/eventmanagement/v1/events/tracker` | Lists specific events according to the tracker ID. |
| POST | `/curatedsnapshot/v1/jobs` | Create a new Curated Snapshot. |
| GET | `/curatedsnapshot/v1/jobs` | List all the Curated Snapshot Jobs. |
| GET | `/curatedsnapshot/v1/jobs/{jobID}` | List the details of the Curated Snapshot job. |
| PUT | `/curatedsnapshot/v1/jobs/cancel` | Cancel the ongoing Curated Snapshot job. |
| GET | `/curatedsnapshot/v1/jobs/{JobID}/report` | Download Report of Curated Snapshot job. |
| GET | `/curatedsnapshot/v1/snapshots` | List all the Curated Snapshots. |
| DELETE | `/curatedsnapshot/v1/snapshots` | Delete the Curated Snapshot. |
| POST | `/threathunting/v1/search/backupset` | Search resources for VMware resource type |
| POST | `/threathunting/v1/threathunts` | Create a threat hunt |
| GET | `/threathunting/v1/threathunts` | List all threat hunts |
| PUT | `/threathunting/v1/threathunts/{threatHuntID}/cancel` | Cancel a threat hunt |
| DELETE | `/threathunting/v1/threathunts/{threatHuntID}` | Delete a threat hunt |
| GET | `/threathunting/v1/threathunts/{threatHuntID}` | List threat hunt configuration details |
| GET | `/threathunting/v1/threathunts/{threatHuntID}/summary` | Get threat hunt summary for a specific threat hunt |
| GET | `/threathunting/v1/threathunts/{threatHuntID}/devices` | Lists the devices that are a part of a Threat Hunt job. |
| GET | `/threathunting/v1/threathunts/{threatHuntID}/devices/stats` | List statistics of devices configured for threat hunt |
| GET | `/threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}` | Get resource details for a specific threat hunt |
| GET | `/threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/stats` | Get device statistics for a specific threat hunt |
| GET | `/threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/snapshots` | List impacted snapshots for a specific threat hunt |
| GET | `/threathunting/v1/threathunts/{threatHuntID}/report` | Download a report |
| GET | `/threatintel/v1/ioc-sets` | Listing of ioc sets |
| POST | `/threatintel/v1/ioc-sets` | Creates a new IOC set. |
| GET | `/threatintel/v1/ioc-sets/iocs` | Lists all the IOCs that matches the specified parameters. |
| GET | `/threatintel/v1/ioc-sets/{iocsetid}` | Details of ioc set |
| DELETE | `/threatintel/v1/ioc-sets/{iocsetid}` | Delete an existing IOC Set. |
| PATCH | `/threatintel/v1/ioc-sets/{iocsetid}` | Updates existing IOC Set |
| DELETE | `/threatintel/v1/ioc-sets/{iocsetid}/iocs` | Deletes IOCs from IOC Set |
| GET | `/threatintel/v1/ioc/lookup` | Check if the specified IOC exists in any of the existing IOC Sets. |

## Machine-readable artifacts (2)

- **OpenAPI** — https://raw.githubusercontent.com/api-evangelist/druva/refs/heads/main/openapi/druva-cyber-resilience-govcloud-openapi.json
- **Documentation** — https://developer.druva.com/reference

## Other Druva APIs (12)

- [Druva Authentication API](https://apis.io/apis/druva/authentication/)
- [Druva MSP Authentication API](https://apis.io/apis/druva/msp-authentication/)
- [Druva GovCloud Authentication API](https://apis.io/apis/druva/govcloud-authentication/)
- [Druva Hybrid Workloads GovCloud Authentication API](https://apis.io/apis/druva/hybrid-workload-govcloud-authentication/)
- [Druva Endpoints and Data Governance API](https://apis.io/apis/druva/endpoints-data-governance/)
- [Druva Endpoints and Data Governance GovCloud API](https://apis.io/apis/druva/insync-govcloud/)
- [Druva Enterprise Workloads API](https://apis.io/apis/druva/enterprise-workloads/)
- [Druva Enterprise Workloads GovCloud API](https://apis.io/apis/druva/enterprise-workloads-govcloud/)
- [Druva Cyber Resilience API](https://apis.io/apis/druva/cyber-resilience/)
- [Druva GovCloud Cyber Resilience Authorization API](https://apis.io/apis/druva/cyber-resilience-govcloud-authorization/)
- [Druva CloudRanger Native Workloads API](https://apis.io/apis/druva/cloudranger/)
- [Druva AWS Native Workloads API](https://apis.io/apis/druva/aws-native/)

## Tags

Cyber Resilience, GovCloud, Ransomware Recovery, Threat Hunting, Threat Intel

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/apis/druva/cyber-resilience-govcloud/). The API's provider profile, Kin Score and agent-readiness rating are at https://apis.io/providers/druva/.