Druva Cyber Resilience API

The Realize API for Druva Cyber Resilience. Accelerated Ransomware Recovery quarantine ranges and snapshots, curated snapshot jobs, threat hunting, threat intel IOC sets and lookup, threat watch, unusual data activity anomaly detection, restore scans and the Realize event stream.

Operations 62

GET /ransomwarerecovery/v1/search/resource Search for infected resources
POST /ransomwarerecovery/v1/quarantineranges/resource/{resourceID} Quarantine snapshots on a resource - v1
GET /ransomwarerecovery/v1/quarantineranges Lists all quarantine ranges - v1
GET /ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID} Get details of a quarantine range - v1
PUT /ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID} Update the quarantine range - v1
DELETE /ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID} Delete a quarantine range - v1
GET /ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID} List all snapshots - v1
DELETE /ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}/snapshot/{snapshotID} Delete a snapshot - v1
GET /ransomwarerecovery/v2/quarantineranges Lists all resources with at least one quarantined snapshot, filtered by query parameters - v2
POST /ransomwarerecovery/v2/quarantineranges/resource/{resourceID} Creates provided quarantine ranges - v2
PUT /ransomwarerecovery/v2/quarantineranges/resource/{resourceID} Creates / Updates / Deletes provided quarantine ranges - v2
GET /ransomwarerecovery/v2/quarantineranges/resource/{resourceID} Lists details of specific resource ID which is present in quarantine bay - v2
GET /ransomwarerecovery/v2/snapshots/resource/{resourceID} Lists all snapshots quarantined for a given resource - v2
GET /uda/v1/stats/{workload}/resources/{resourceID} List snapshot statistics
GET /rwc/v1/settings Lists all the current settings.
PUT /rwc/v1/settings Save the current settings.
GET /rwcscanmaster/v1/jobs Lists all the Restore scans jobs.
GET /rwcscanmaster/v1/jobs/{JobID} Lists the details of Restore scans job.
GET /rwcscanmaster/v1/jobs/{JobID}/report Lists the details of the affected or skipped files in the Restore scans job.
GET /rwcscanmaster/v1/jobs/count List count of restore scan jobs
GET /eventmanagement/v1/events Lists all Realize Events. #
GET /eventmanagement/v1/events/tracker Lists specific events according to the tracker ID. #
POST /curatedsnapshot/v1/jobs Create a new Curated Snapshot.
GET /curatedsnapshot/v1/jobs List all the Curated Snapshot Jobs.
GET /curatedsnapshot/v1/jobs/{jobID} List the details of the Curated Snapshot job.
PUT /curatedsnapshot/v1/jobs/cancel Cancel the ongoing Curated Snapshot job.
GET /curatedsnapshot/v1/jobs/{JobID}/report Download Report of Curated Snapshot job.
GET /curatedsnapshot/v1/snapshots List all the Curated Snapshots.
DELETE /curatedsnapshot/v1/snapshots Delete the Curated Snapshot.
POST /threathunting/v1/search/backupset Search resources for VMware resource type
POST /threathunting/v1/threathunts Create a threat hunt
GET /threathunting/v1/threathunts List all threat hunts
PUT /threathunting/v1/threathunts/{threatHuntID}/cancel Cancel a threat hunt
DELETE /threathunting/v1/threathunts/{threatHuntID} Delete a threat hunt
GET /threathunting/v1/threathunts/{threatHuntID} List threat hunt configuration details
GET /threathunting/v1/threathunts/{threatHuntID}/summary Get threat hunt summary for a specific threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/devices Lists the devices that are a part of a Threat Hunt job.
GET /threathunting/v1/threathunts/{threatHuntID}/devices/stats List statistics of devices configured for threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID} Get resource details for a specific threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/stats Get device statistics for a specific threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/snapshots List impacted snapshots for a specific threat hunt
GET /threathunting/v1/threathunts/{threatHuntID}/report Download a report
GET /threathunting/v1/threatwatch/config Get Threat Watch configuration details
PUT /threathunting/v1/threatwatch/config Update Threat Watch configuration
GET /threathunting/v1/threatwatch/devices Lists Threat Watch impacted devices
GET /threathunting/v1/threatwatch/devices/{deviceID} Get Threat Watch device details
GET /threathunting/v1/threatwatch/devices/{deviceID}/stats Get Threat Watch device statistics
GET /threathunting/v1/threatwatch/impacteddevices/stats Get Impacted Devices Statistics
GET /threathunting/v1/threatwatch/iocs Lists IOC Sets and impacted details for each IOC Set
GET /threathunting/v1/threatwatch/reports/{snapshotID} Downloads Threat Watch snapshot report
GET /threathunting/v1/threatwatch/scans List Threat Watch Scans
GET /common/v1/search/aws/awsaccounts Search AWS Accounts
GET /common/v1/search/aws/resourceids List AWS Resources
POST /common/v1/search/aws/resources Search AWS Resources
GET /threatintel/v1/ioc-sets Listing of IOC Sets #
POST /threatintel/v1/ioc-sets Creates a new IOC Set #
GET /threatintel/v1/ioc-sets/iocs Lists all the IOCs that matches the specified parameters #
GET /threatintel/v1/ioc-sets/{iocsetid} Details of IOC Set #
DELETE /threatintel/v1/ioc-sets/{iocsetid} Delete an existing IOC Set #
PATCH /threatintel/v1/ioc-sets/{iocsetid} Updates existing IOC Set #
DELETE /threatintel/v1/ioc-sets/{iocsetid}/iocs Deletes IOCs from IOC Set #
GET /threatintel/v1/ioc/lookup Check if the specified IOC exists in any of the existing IOC Sets #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API
curl "https://apis.io/api/v1/apis/cyber-resilience"
All apis
curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

druva-cyber-resilience-openapi.json Raw ↑
{"openapi":"3.0.0","info":{"description":"","version":"3.0.0","title":"Cyber Resilience"},"tags":[{"name":"Ransomware Recovery","description":"List of APIs to get information and perform operations on ransomware affected resources managed in Druva Cloud."},{"name":"Data Anomalies","description":"View a list of the resources managed in Druva Cloud detected with Data Anomalies."},{"name":"Restore scans","description":"List of APIs to get information and perform operations of Restore scans on the resources managed in Druva Cloud."},{"name":"Realize Events","description":"List of APIs to get information of Events of Realize product in Druva Cloud."},{"name":"Curated Snapshots","description":"List of APIs to get information of and manage the Curated Snapshots for the resources managed in Druva Cloud."},{"name":"Threat Hunting","description":"List of APIs to get information and perform operations on the resources managed in Druva Cloud for threat hunt."},{"name":"Threat Intel","description":"List of APIs to view details and manage IOC Sets in the IOC library."},{"name":"Threat Watch","description":"List of APIs that helps to retrieve information and perform operations on Threat Watch. Threat Watch is an automated continuous monitoring feature that scans resources for threats every 8 hours."}],"paths":{"/ransomwarerecovery/v1/search/resource":{"get":{"tags":["Ransomware Recovery"],"summary":"Search for infected resources","description":"Search for an infected resource like a device or any data source like NAS, File Server, and so on using the name of the resource.","security":[{"Bearer":[]}],"parameters":[{"name":"hostname","in":"query","description":"Specify the complete name or a prefix from the device name, hostname, or server name by which you intend to search and list the devices, hostname, or servers. Example - “My” is the prefix in the device name “MyDevice123”.","required":true,"schema":{"type":"string"}},{"name":"orgName","in":"query","description":"Specify the complete name of an Organization","required":false,"schema":{"type":"string"}},{"name":"resourceType","in":"query","description":"Specify Resource Type for filtering.","required":false,"schema":{"type":"string","enum":["Endpoint","File Server","NAS","VMware","OneDrive","Google Drive","SharePoint","Shared Drive"]}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/searchResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}":{"post":{"tags":["Ransomware Recovery"],"summary":"Quarantine snapshots on a resource - v1","description":"Quarantine all snapshots, or snapshots within a date range on a resource.\n:fa-info-circle: Users and administrators cannot restore or download data from the quarantined snapshots.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, Google Drive, SharePoint, and Shared Drive. However, only v2 Quarantine APIs are supported for Azure Virtual Machines.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which the snapshots should be quarantined. \nGet the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeCreateRequest"}}},"description":"Required parameters for a quarantine range to be created."},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeCreateResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/quarantineranges":{"get":{"tags":["Ransomware Recovery"],"summary":"Lists all quarantine ranges - v1","description":"Returns the list of all the defined quarantined ranges for resources along with their details.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, Google Drive, SharePoint, and Shared Drive. However, only v2 Quarantine APIs are supported for Azure Virtual Machines.","security":[{"Bearer":[]}],"parameters":[{"name":"searchString","in":"query","required":false,"description":"Specify the complete name or a prefix from the resource name by which you intend to search and list the resources. Example - “My” is the prefix in the resource name “MyResource123”.","schema":{"type":"string"}},{"name":"resourceParent","in":"query","required":false,"description":"Specify the complete name or a prefix from the resource parent's name by which you intend to search and list the resources. Example - “My” is the prefix in the resource parent's name “MyParent123”.","schema":{"type":"string"}},{"name":"fromDate","in":"query","required":false,"description":"Specify a date from which you want to list all the quarantined resources. Format - YYYY-MM-DD\nExample - 2020-10-25.\n:fa-info-circle: If you do not specify a date this will list all quarantined resources from January 06, 2020 (a system-defined limit).\nDruva uses UTC time zone to quarantine a resource. You must factor in the difference between the resource time zone and UTC zone while selecting the dates.","schema":{"type":"string"}},{"name":"toDate","in":"query","required":false,"description":"Specify a date till which you want to list all the quarantined resources. Format - YYYY-MM-DD\nExample - 2020-10-25.\n:fa-info-circle: If you do not specify a date this will list all quarantined resources till date.\nDruva uses UTC time zone to quarantine a resource. You must factor in the difference between the resource time zone and UTC zone while selecting the dates.","schema":{"type":"string"}},{"name":"resourceType[]","in":"query","required":false,"description":"This can be used to filter Quarantine ranges based on Resource Type. Multiple resource types can be selected at once.","style":"form","explode":false,"schema":{"type":"array","items":{"type":"string","enum":["Endpoint","File Server","NAS","VMware","OneDrive","Google Drive","SharePoint","Shared Drive"]}}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"integer"}},{"name":"orgID","in":"query","required":false,"description":"The unique identifier of the Phoenix organization for the resource. Not applicable for Endpoints.","schema":{"type":"integer"}},{"name":"resourceName","in":"query","required":false,"description":"Specify the resource name to filter and list the specific resource name within Druva Cloud. Example - 'DOMAIN1234'.","schema":{"type":"string"}},{"name":"resourceID","in":"query","required":false,"description":"The unique ID of the quarantined resource on which the snapshots range needs to be updated. \n  Get the ID of a device using the ‘List all devices’ API. \n  For data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeListResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID}":{"get":{"tags":["Ransomware Recovery"],"summary":"Get details of a quarantine range - v1","description":"Returns information about a quarantine range on an infected resource using the rangeID.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, Google Drive, SharePoint, and Shared Drive. However, only v2 Quarantine APIs are supported for Azure Virtual Machines.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which you seek the quarantine range information. \n  Get the ID of a device using the ‘List all devices’ API. \n  For data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique quarantine range ID for which you need the details. \nGet the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeGetResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}},"put":{"tags":["Ransomware Recovery"],"summary":"Update the quarantine range - v1","description":"Use this API to update the quarantine range for an infected resource.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, Google Drive, SharePoint, and Shared Drive. However, only v2 Quarantine APIs are supported for Azure Virtual Machines.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the quarantined resource on which the snapshots range needs to be updated. \n  Get the ID of a device using the ‘List all devices’ API. \n  For data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique quarantine range ID which needs the update. \nGet the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeUpdateRequest"}}},"description":"Required parameters for a quarantine range to be created."},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeCreateResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}},"delete":{"tags":["Ransomware Recovery"],"summary":"Delete a quarantine range - v1","description":"Deletes the quarantine range for an infected resource. When you delete a quarantine range, all the snapshots on the resource are again available for restore and download.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, Google Drive, SharePoint, and Shared Drive. However, only v2 Quarantine APIs are supported for Azure Virtual Machines.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which the quarantine range should be deleted. \n  Get the ID of a device using the ‘List all devices’ API. \n  For data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique quarantine range ID which needs to be deleted. \nGet the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"integer"}}],"responses":{"200":{"description":"OK"},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}":{"get":{"tags":["Ransomware Recovery"],"summary":"List all snapshots - v1","description":"Lists all the quarantined snapshots within a specified range on the resource.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, Google Drive, SharePoint, and Shared Drive. However, only v2 Quarantine APIs are supported for Azure Virtual Machines.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which you want to list the quarantine snapshots. \n  Get the ID of a device using the 'List all devices' API. \n  For data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique Quarantine range ID for which you need to list the quarantined snapshots. \n  Get the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"string"}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/snapshotListResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}/snapshot/{snapshotID}":{"delete":{"tags":["Ransomware Recovery"],"summary":"Delete a snapshot - v1","description":"Delete an infected snapshot using the snapshot ID.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, Google Drive, SharePoint, and Shared Drive. However, only v2 Quarantine APIs are supported for Azure Virtual Machines.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which you want to delete a quarantined snapshot. \n  Get the ID of a device using the 'List all devices' API. \n  For data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique ID of the quarantine range that includes the snapshot that you want to delete. \n  Get the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"integer"}},{"name":"snapshotID","in":"path","required":true,"description":"The unique snapshot ID which needs to be deleted.","schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/deleteSnapshotSchema"}}},"description":"The reason for deletion of the snapshot."},"responses":{"200":{"description":"OK"},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v2/quarantineranges":{"get":{"tags":["Ransomware Recovery"],"summary":"Lists all resources with at least one quarantined snapshot, filtered by query parameters - v2","description":"Lists all resources which have at least one quarantined snapshot and satisfy the filter criteria given by query parameters","parameters":[{"name":"searchString","in":"query","description":"Search string for filtering resources","schema":{"type":"string"}},{"name":"fromDate","in":"query","description":"Start date of quarantine range (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"toDate","in":"query","description":"End date of quarantine range (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"resourceTypes[]","in":"query","description":"List of resource types","schema":{"type":"string","enum":["Endpoint","File Server","NAS","VMware","OneDrive","Google Drive","SharePoint","Shared Drive","AzureVM"]}},{"name":"pageToken","in":"query","description":"Token for pagination","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listQuarantinedResourcesResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/ransomwarerecovery/v2/quarantineranges/resource/{resourceID}":{"post":{"tags":["Ransomware Recovery"],"summary":"Creates provided quarantine ranges - v2","description":"Creates provided quarantine ranges for resources. While creating quarantine ranges, the API checks for overlapping ranges and displays an error if the overlapping ranges are present.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource for which you want to create a quarantine range.","schema":{"type":"integer"}}],"requestBody":{"$ref":"#/components/requestBodies/createQuarantineRangeV2RequestSchema"},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/createQuarantineRangeV2ResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}},"put":{"tags":["Ransomware Recovery"],"summary":"Creates / Updates / Deletes provided quarantine ranges - v2","description":"This API replaces all existing quarantine ranges for a resource with the provided ranges. To preserve existing ranges, retrieve them via a GET (/ransomwarerecovery/v2/quarantineranges) request before using this API. If no ranges are provided in the input, all existing ranges for the resource are deleted.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource that you want to quarantine.","schema":{"type":"integer"}}],"requestBody":{"$ref":"#/components/requestBodies/createQuarantineRangeV2RequestSchema"},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/createQuarantineRangeV2ResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}},"get":{"tags":["Ransomware Recovery"],"summary":"Lists details of specific resource ID which is present in quarantine bay - v2","description":"Retrieves detailed information for specific resource IDs within the quarantine Bay.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource that you want to retrieve.","schema":{"type":"string"}},{"name":"resourceType","in":"query","required":true,"description":"Type of the resource (e.g., Endpoint)","schema":{"type":"string","enum":["Endpoint","File Server","NAS","VMware","OneDrive","Google Drive","SharePoint","Shared Drive","AzureVM"]}},{"name":"orgID","in":"query","description":"This API allows you to filter the Organization list based on the unique Organization ID.","schema":{"type":"integer","format":"int32"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listDetailsOfQuarantinedResourceResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/ransomwarerecovery/v2/snapshots/resource/{resourceID}":{"get":{"tags":["Ransomware Recovery"],"summary":"Lists all snapshots quarantined for a given resource - v2","description":"Lists all snapshots quarantined for a given resource.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"This API allows you to retrieve a snapshot list based on the unique ID of the resource.","schema":{"type":"string"}},{"name":"resourceType","in":"query","required":true,"description":"Type of the resource. For example, Endpoint.","schema":{"type":"string","enum":["Endpoint","File Server","NAS","VMware","OneDrive","Google Drive","SharePoint","Shared Drive","AzureVM"]}},{"name":"orgId","in":"query","description":"The unique ID of the organization. To view a list of all the organizations, enter -1.","schema":{"type":"integer","format":"int32"}},{"name":"fromDate","in":"query","description":"Start date of the snapshot (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"toDate","in":"query","description":"End date of the snapshot (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"udaImpact","in":"query","description":"Indicates whether the resource is impacted by a Data Anomaly (UDA). True signifies impact, False indicates no impact.","schema":{"type":"boolean"}},{"name":"quarantineType[]","in":"query","required":false,"description":"The filters to list and view details based on the quarantine type. Example: manual or auto.","explode":true,"schema":{"type":"array","items":{"type":"string","enum":["auto","manual"]}}},{"name":"airGapType","in":"query","required":false,"description":"The filters to list and view details based on the backup type. Example: airgapped or nonairgapped.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listAllQuarantinedSnapshotsForResourceResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/uda/v1/stats/{workload}/resources/{resourceID}":{"get":{"tags":["Data Anomalies"],"summary":"List snapshot statistics","description":"Returns the snapshot statistics for a resource for which the Data Anomalies alert is generated. It displays the statistics for the last 30 days.","security":[{"Bearer":[]}],"parameters":[{"name":"workload","in":"path","description":"Specify the workload for which you want to view the statistics.","required":true,"schema":{"type":"string","enum":["fileserver","nas","endpoints","sharepoint","onedrive","vmware","azurevm","ec2","ebsvolume"]}},{"name":"resourceID","in":"path","description":"The unique ID of the resource for which you want to list and view all the anomalous snapshots. \n  Get the ID of a device using the 'List all devices' API. \n  For data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","required":true,"schema":{"type":"integer"}},{"name":"pageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","required":false,"schema":{"type":"integer"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listResourceCverStats"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/rwc/v1/settings":{"get":{"tags":["Restore scans"],"summary":"Lists all the current settings.","description":"Returns the details of the current settings of Restore scans.","security":[{"Bearer":[]}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SettingsResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}},"put":{"tags":["Restore scans"],"summary":"Save the current settings.","description":"Saves the current settings of Restore scans.","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SettingsRequest"}}},"description":"Required parameters for a default setting to be created for scan. To enable or disable the Anti Virus (AV) scan and File Hash scan settings as default."},"security":[{"Bearer":[]}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}}},"/rwcscanmaster/v1/jobs":{"get":{"tags":["Restore scans"],"security":[{"Bearer":[]}],"parameters":[{"name":"sortBy","in":"query","description":"Specify the parameter by which you intend to sort the listed results. Sorting can be done on basis of 'scanJobID', 'resourceType' parameters.","required":false,"schema":{"type":"string","enum":["scanJobID","status","resourceType"]}},{"name":"sortOrder","in":"query","description":"Specify the order by which you intend to sort and list the results. Sorting can be done in ascending or descending order.","required":false,"schema":{"type":"string","enum":["asc","desc"]}},{"name":"status[]","in":"query","description":"Specify the current status of the scan job to filter and list the jobs. The status can be 'Running', 'Queued', 'Successful', 'Cancelled' and 'Failed'","required":false,"style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Running","Queued","Successful","Cancelled","Failed"]}},{"name":"resourceType[]","in":"query","required":false,"description":"Specify the resource type to filter and list the data for the resource types. The resource type can be 'File Server', 'Endpoints' and 'NAS'","style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["File Server","Endpoints","NAS"]}},{"name":"resourceName","in":"query","description":"Specify the resource name to filter and list the data for that specific resource name within Druva Cloud. Example - 'DOMAIN1234'.","schema":{"type":"string"}},{"name":"startedIn","in":"query","required":false,"description":"Specify the time when the job was started.","schema":{"type":"string","enum":["Last 24 Hours","Last 7 Days","Last 1 Month"]}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"summary":"Lists all the Restore scans jobs.","description":"Returns the list of all Restore scans jobs.","responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/jobListModel"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Se

# --- truncated at 32 KB (207 KB total) ---
# Full source: https://raw.githubusercontent.com/api-evangelist/druva/refs/heads/main/openapi/druva-cyber-resilience-openapi.json