{"openapi":"3.0.0","info":{"description":"","version":"3.0.0","title":"Cyber Resilience For GovCloud"},"tags":[{"name":"Ransomware Recovery","description":"List of APIs to get information and perform operations on ransomware affected resources managed in the Druva Cloud."},{"name":"Data Anomalies","description":"View a list of the resources managed in Druva Cloud detected with Data Anomalies."},{"name":"Restore scans","description":"List of APIs to get information and perform operations of Restore scans on the resources managed in Druva Cloud."},{"name":"Curated Snapshots","description":"List of APIs to get information of and manage the Curated Snapshots for the resources managed in Druva Cloud."},{"name":"Threat Hunting","description":"List of APIs to get information and perform operations on the resources managed in Druva Cloud for threat hunting."},{"name":"Threat Intel","description":"List of APIs to view details and manage IOC Sets in the IOC library."}],"paths":{"/ransomwarerecovery/v1/search/resource":{"get":{"tags":["Ransomware Recovery"],"summary":"Search for infected resources","description":"Search for an infected resource like a device using the name of the resource.","security":[{"Bearer":[]}],"parameters":[{"name":"hostname","in":"query","description":"Specify the complete name or a prefix from the device name by which you intend to search and list the devices. Example - “My” is the prefix in the device name “MyDevice123”.","required":true,"schema":{"type":"string"}},{"name":"orgName","in":"query","description":"Specify the complete name of an organization. For inSync workloads, this parameter is not applicable.","required":false,"schema":{"type":"string"}},{"name":"resourceType","in":"query","description":"Specify Resource Type for filtering.","required":false,"schema":{"type":"string","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/searchResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}":{"post":{"tags":["Ransomware Recovery"],"summary":"Quarantine snapshots on a resource - v1","description":"Quarantine all snapshots, or snapshots within a date range on a resource.\n:fa-info-circle: Users and administrators cannot restore or download data from the quarantined snapshots.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which the snapshots should be quarantined. \nGet the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeCreateRequest"}}},"description":"Required parameters for a quarantine range to be created."},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeCreateResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/quarantineranges":{"get":{"tags":["Ransomware Recovery"],"summary":"Lists all quarantine ranges - v1","description":"Returns the list of all the defined quarantined ranges for resources along with their details.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"searchString","in":"query","required":false,"description":"Specify the complete name or a prefix from the resource name by which you intend to search and list the resources. Example - “My” is the prefix in the resource name “MyResource123”.","schema":{"type":"string"}},{"name":"resourceParent","in":"query","required":false,"description":"Specify the complete name or a prefix from the resource parent's name by which you intend to search and list the resources. Example - “My” is the prefix in the resource parent's name “MyParent123”.","schema":{"type":"string"}},{"name":"fromDate","in":"query","required":false,"description":"Specify a date from which you want to list all the quarantined resources. Format - YYYY-MM-DD\nExample - 2020-10-25.\n:fa-info-circle: If you do not specify a date this will list all quarantined resources from January 06, 2020 (a system-defined limit).\nDruva uses UTC time zone to quarantine a resource. You must factor in the difference between the resource time zone and UTC zone while selecting the dates.","schema":{"type":"string"}},{"name":"toDate","in":"query","required":false,"description":"Specify a date till which you want to list all the quarantined resources. Format - YYYY-MM-DD\nExample - 2020-10-25.\n:fa-info-circle: If you do not specify a date this will list all quarantined resources till date.\nDruva uses UTC time zone to quarantine a resource. You must factor in the difference between the resource time zone and UTC zone while selecting the dates.","schema":{"type":"string"}},{"name":"resourceType[]","in":"query","required":false,"description":"This can be used to filter Quarantine ranges based on Resource Type. Multiple resource types can be selected at once.","style":"form","explode":false,"schema":{"type":"array","items":{"enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"integer"}},{"name":"orgID","in":"query","required":false,"description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","schema":{"type":"integer"}},{"name":"resourceName","in":"query","required":false,"description":"Specify the resource name to filter and list the specific resource name within Druva Cloud. Example - 'DOMAIN1234'.","schema":{"type":"string"}},{"name":"resourceID","in":"query","required":false,"description":"The unique ID of the quarantined resource on which the snapshots range needs to be updated. \n  Get the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeListResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/quarantineranges/resource/{resourceID}/range/{rangeID}":{"get":{"tags":["Ransomware Recovery"],"summary":"Get details of a quarantine range - v1","description":"Returns information about a quarantine range on an infected resource using the rangeID.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which you seek the quarantine range information. \n  Get the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique quarantine range ID for which you need the details. \nGet the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeGetResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}},"put":{"tags":["Ransomware Recovery"],"summary":"Update the quarantine range - v1","description":"Use this API to update the quarantine range for an infected resource.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the quarantined resource on which the snapshots range needs to be updated. \n  Get the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique quarantine range ID which needs the update. \nGet the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeUpdateRequest"}}},"description":"Required parameters for a quarantine range to be created."},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/quarantineRangeCreateResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}},"delete":{"tags":["Ransomware Recovery"],"summary":"Delete a quarantine range - v1","description":"Deletes the quarantine range for an infected resource. When you delete a quarantine range, all the snapshots on the resource are again available for restore and download.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which the quarantine range should be deleted. \n  Get the ID of a device using the ‘List all devices’ API. \nFor data sources like File Server, NAS, VMware refer to the respective ‘List all backup sets’ API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique quarantine range ID which needs to be deleted. \nGet the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"integer"}}],"responses":{"200":{"description":"OK"},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}":{"get":{"tags":["Ransomware Recovery"],"summary":"List all snapshots - v1","description":"Lists all the quarantined snapshots within a specified range on the resource.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which you want to list the quarantine snapshots. \n  Get the ID of a device using the 'List all devices' API. \nFor data sources like File Server, NAS, VMware refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique Quarantine range ID for which you need to list the quarantined snapshots. \n  Get the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"string"}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/snapshotListResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v1/snapshots/resource/{resourceID}/range/{rangeID}/snapshot/{snapshotID}":{"delete":{"tags":["Ransomware Recovery"],"summary":"Delete a snapshot - v1","description":"Delete an infected snapshot using the snapshot ID.\n:fa-info-circle: Both v1 and v2 Quarantine APIs are supported for Endpoints, File Server, NAS, VMware, OneDrive, and SharePoint.","security":[{"Bearer":[]}],"parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource on which you want to delete a quarantined snapshot. \n  Get the ID of a device using the 'List all devices' API. \nFor data sources like File Server, NAS, VMware refer to the respective 'List all backup sets' API.","schema":{"type":"integer"}},{"name":"rangeID","in":"path","required":true,"description":"The unique ID of the quarantine range that includes the snapshot that you want to delete. \n  Get the quarantine range ID using the 'List all quarantine ranges' API.","schema":{"type":"integer"}},{"name":"snapshotID","in":"path","required":true,"description":"The unique snapshot ID which needs to be deleted.","schema":{"type":"string"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/deleteSnapshotSchema"}}},"description":"The reason for deletion of the snapshot."},"responses":{"200":{"description":"OK"},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RR_HTTP_500"}}}}}}},"/ransomwarerecovery/v2/quarantineranges":{"get":{"tags":["Ransomware Recovery"],"summary":"Lists all resources with at least one quarantined snapshot, filtered by query parameters - v2","description":"Lists all resources which have at least one quarantined snapshot and satisfy the filter criteria given by query parameters","parameters":[{"name":"searchString","in":"query","description":"Search string for filtering resources","schema":{"type":"string"}},{"name":"fromDate","in":"query","description":"Start date of quarantine range (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"toDate","in":"query","description":"End date of quarantine range (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"resourceTypes[]","in":"query","description":"List of resource types","schema":{"type":"string","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}},{"name":"pageToken","in":"query","description":"Token for pagination","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listQuarantinedResourcesResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/ransomwarerecovery/v2/quarantineranges/resource/{resourceID}":{"post":{"tags":["Ransomware Recovery"],"summary":"Creates provided quarantine ranges - v2","description":"Creates provided quarantine ranges for resources. While creating quarantine ranges, the API checks for overlapping ranges and displays an error if the overlapping ranges are present.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource for which you want to create a quarantine range.","schema":{"type":"integer"}}],"requestBody":{"$ref":"#/components/requestBodies/createQuarantineRangeV2RequestSchema"},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/createQuarantineRangeV2ResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}},"put":{"tags":["Ransomware Recovery"],"summary":"Creates / Updates / Deletes provided quarantine ranges - v2","description":"This API replaces all existing quarantine ranges for a resource with the provided ranges. To preserve existing ranges, retrieve them via a GET (/ransomwarerecovery/v2/quarantineranges) request before using this API. If no ranges are provided in the input, all existing ranges for the resource are deleted.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource that you want to quarantine.","schema":{"type":"integer"}}],"requestBody":{"$ref":"#/components/requestBodies/createQuarantineRangeV2RequestSchema"},"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/createQuarantineRangeV2ResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}},"get":{"tags":["Ransomware Recovery"],"summary":"Lists details of specific resource ID which is present in quarantine bay - v2","description":"Retrieves detailed information for specific resource IDs within the quarantine Bay.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"The unique ID of the resource that you want to retrieve.","schema":{"type":"string"}},{"name":"resourceType","in":"query","required":true,"description":"Type of the resource (for example, Endpoint).","schema":{"type":"string","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}},{"name":"orgID","in":"query","description":"The Phoenix organization ID for the resource. Not applicable for inSync workloads","schema":{"type":"integer","format":"int32"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listDetailsOfQuarantinedResourceResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/ransomwarerecovery/v2/snapshots/resource/{resourceID}":{"get":{"tags":["Ransomware Recovery"],"summary":"Lists all snapshots quarantined for a given resource - v2","description":"Lists all snapshots quarantined for a given resource.","parameters":[{"name":"resourceID","in":"path","required":true,"description":"This API allows you to retrieve a snapshot list based on the unique ID of the resource.","schema":{"type":"string"}},{"name":"resourceType","in":"query","required":true,"description":"Type of the resource. For example, Endpoint.","schema":{"type":"string","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]}},{"name":"orgId","in":"query","description":"The unique ID of the organization. To view a list of all the organizations, enter -1.","schema":{"type":"integer","format":"int32"}},{"name":"fromDate","in":"query","description":"Start date of the snapshot (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"toDate","in":"query","description":"End date of the snapshot (YYYY-MM-DD)","schema":{"type":"string","format":"date"}},{"name":"udaImpact","in":"query","description":"Indicates whether the resource is impacted by a Data Anomaly (UDA). True signifies impact, False indicates no impact.","schema":{"type":"boolean"}},{"name":"quarantineType[]","in":"query","required":false,"description":"The filters to list and view details based on the quarantine type. Example: manual or auto.","explode":true,"schema":{"type":"array","items":{"type":"string","enum":["auto","manual"]}}},{"name":"airGapType","in":"query","required":false,"description":"The filters to list and view details based on the backup type. Example: airgapped or nonairgapped.","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listAllQuarantinedSnapshotsForResourceResponseSchema"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request did not include an authentication token or an expired authentication token was supplied."},"404":{"description":"Not found","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/uda/v1/stats/{workload}/resources/{resourceID}":{"get":{"tags":["Data Anomalies"],"summary":"List snapshot statistics","description":"Returns the snapshot statistics for a resource for which the Data Anomalies alert is generated. It displays the statistics for the last 30 days.","security":[{"Bearer":[]}],"parameters":[{"name":"workload","in":"path","description":"Specify the workload for which you want to view the statistics.","required":true,"schema":{"type":"string","enum":["fileserver","nas","endpoints","sharepoint","onedrive","vmware"]}},{"name":"resourceID","in":"path","description":"The unique ID of the resource for which you want to list and view all the anomalous snapshots. \n  Get the ID of a device using the 'List all devices' API. \n  For data sources like File Server, NAS, VMware and so on, refer to the respective 'List all backup sets' API.","required":true,"schema":{"type":"integer"}},{"name":"pageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","required":false,"schema":{"type":"integer"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/listResourceCverStats"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/rwc/v1/settings":{"get":{"tags":["Restore scans"],"summary":"Lists all the current settings.","description":"Returns the details of the current settings of Restore scans.","security":[{"Bearer":[]}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/SettingsResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}},"put":{"tags":["Restore scans"],"summary":"Save the current settings.","description":"Saves the current settings of Restore scans.","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/SettingsRequest"}}},"description":"Required parameters for a default setting to be created for scan. To enable or disable the Anti Virus (AV) scan and File Hash scan settings as default."},"security":[{"Bearer":[]}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}}},"/rwcscanmaster/v1/jobs":{"get":{"tags":["Restore scans"],"security":[{"Bearer":[]}],"parameters":[{"name":"sortBy","in":"query","description":"Specify the parameter by which you intend to sort the listed results. Sorting can be done on basis of 'scanJobID', 'resourceType' parameters.","required":false,"schema":{"type":"string","enum":["scanJobID","status","resourceType"]}},{"name":"sortOrder","in":"query","description":"Specify the order by which you intend to sort and list the results. Sorting can be done in ascending or descending order.","required":false,"schema":{"type":"string","enum":["asc","desc"]}},{"name":"status[]","in":"query","description":"Specify the current status of the scan job to filter and list the jobs. The status can be 'Running', 'Queued', 'Successful', 'Cancelled' and 'Failed'","required":false,"style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Running","Queued","Successful","Cancelled","Failed"]}},{"name":"resourceType[]","in":"query","required":false,"description":"Specify the resource type to filter and list the data for the resource types. The resource type can be 'Endpoints', 'File Server', 'NAS', 'VMware'","style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Endpoints","File Server","NAS","VMware"]}},{"name":"resourceName","in":"query","description":"Specify the resource name to filter and list the data for that specific resource name within Druva Cloud. Example - 'DOMAIN1234'.","schema":{"type":"string"}},{"name":"startedIn","in":"query","required":false,"description":"Specify the time when the job was started.","schema":{"type":"string","enum":["Last 24 Hours","Last 7 Days","Last 1 Month"]}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"summary":"Lists all the Restore scans jobs.","description":"Returns the list of all Restore scans jobs.","responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/jobListModel"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}}},"/rwcscanmaster/v1/jobs/{JobID}":{"get":{"tags":["Restore scans"],"parameters":[{"name":"JobID","in":"path","description":"Specify the Restore scans job ID to view its details. Get the Restore scans job ID using 'Lists all the Restore scans jobs.' API.","required":true,"schema":{"type":"integer"}}],"security":[{"Bearer":[]}],"summary":"Lists the details of Restore scans job.","description":"Returns the details of Restore scans job.","responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/jobDetailsModel"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}}},"/rwcscanmaster/v1/jobs/{JobID}/report":{"get":{"tags":["Restore scans"],"security":[{"Bearer":[]}],"parameters":[{"name":"JobID","in":"path","required":true,"description":"Specify the Restore scans job ID to view details of affected or skipped files. Get the Restore scans job ID using 'Lists all the Restore scans jobs.' API.","schema":{"type":"integer"}},{"name":"Accept","in":"header","required":false,"description":"Specify the content types, expressed as MIME types. The valid values can be: 'aplication/json', 'text/csv'","schema":{"type":"string","enum":["aplication/json","text/csv"]}},{"name":"quarantineState","in":"query","required":false,"description":"Quarantine State of the expected result set. It can be either all, affected or skipped.","schema":{"type":"integer","enum":["all","affected","skipped"]}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"summary":"Lists the details of the affected or skipped files in the Restore scans job.","description":"Returns the details of the affected or skipped files in the Restore scans the scan job.","responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/jobFilesDetailsResponse"}},"text/csv":{"schema":{"$ref":"#/components/schemas/jobFilesDetailsResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}},"text/csv":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}},"text/csv":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}}},"/rwcscanmaster/v1/jobs/count":{"get":{"tags":["Restore scans"],"security":[{"Bearer":[]}],"summary":"List count of restore scan jobs","description":"Returns the count of restore scan jobs.","parameters":[{"name":"createdIn","in":"query","required":false,"description":"Specify the duration to retrieve the number of restore scan jobs that have been run within a specified period of time.\n:fa-info-circle: The API returns the total count of all restore scan jobs run to date if no value is provided.","schema":{"type":"string","enum":["Last 24 Hours","Last 7 Days","Last 1 Month","Last 2 Months","Last 3 Months"]}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/getJobCount"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"500":{"description":"Internal Service Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/RWC_HTTP_500"}}}}}}},"/eventmanagement/v1/events":{"get":{"tags":["Realize Events"],"summary":"Lists all Realize Events.","description":"Returns the list of all the events generated in Druva Realize.","security":[{"Bearer":[]}],"operationId":"ListEvents","parameters":[{"name":"pageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","required":false,"schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ListEventsResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/eventmanagement/v1/events/tracker":{"get":{"tags":["Realize Events"],"summary":"Lists specific events according to the tracker ID.","description":"Returns the list of specific events according to the tracker ID. The events list order is according to event creation time.","security":[{"Bearer":[]}],"operationId":"ListEventsByTracker","parameters":[{"name":"trackerToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextTrackerToken'.","required":false,"schema":{"type":"string"}},{"name":"ignoreTrackerExpiry","in":"query","description":"The tracker token expires in 48 hours. Set this parameter to 'true' to ignore the expiry and fetch the next available set of events.","required":false,"schema":{"type":"string"}},{"name":"filters","in":"query","description":"Specify the filters. Filter can be added for 'event_type_name'\nExample: {\"event_type_name\":\"Admin Login\"}","required":false,"schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"application/json":{"schema":{"$ref":"#/components/schemas/ListEventsByTrackerResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/HTTP_500"}}}}}}},"/curatedsnapshot/v1/jobs":{"post":{"tags":["Curated Snapshots"],"security":[{"Bearer":[]}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CSJobCreationParams"}}}},"summary":"Create a new Curated Snapshot.","description":"Creates a new Curated Snapshot for the specified resource, which could be Endpoint devices, File Server, NAS, OneDrive, or SharePoint sites. VMware workloads are not supported for Curated Snapshot jobs.","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CSJobCreationResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_500"}}}}}},"get":{"tags":["Curated Snapshots"],"security":[{"Bearer":[]}],"parameters":[{"name":"sortOrder","in":"query","description":"Specify the order by which you intend to sort and list the results. Sorting can be done in ascending or descending order.","required":false,"schema":{"type":"string","enum":["asc","desc"]}},{"name":"sortBy","in":"query","description":"Specify the parameter by which you intend to sort the listed results. Sorting can be done on basis of 'jobID', 'status' parameters.","required":false,"schema":{"type":"string","enum":["jobID","status","resourceName"]}},{"name":"resourceType[]","in":"query","required":false,"description":"Specify the resource type to filter and list the data for the resource types. The resource type can be 'Endpoints', 'File Server', 'NAS', 'OneDrive' or 'SharePoint'","style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Endpoints","File Server","NAS","OneDrive","SharePoint"]}},{"name":"status[]","in":"query","description":"Specify the current status of the scan job to filter and list the jobs. The status can be 'Running', 'Queued', 'Successful', 'Cancelled', and 'Failed'.","required":false,"style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Running","Queued","Successful","Cancelled","Failed"]}},{"name":"startedIn","in":"query","required":false,"description":"Specify the time when the job was started.","schema":{"type":"string","enum":["Last 24 Hours","Last 7 Days","Last 1 Month"]}},{"name":"resourceName","in":"query","required":false,"description":"Specify the resource name to filter and list the data for that specific resource name within Druva Cloud. Example - 'DOMAIN1234'.","schema":{"type":"string"}},{"name":"pageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","required":false,"schema":{"type":"string"}}],"summary":"List all the Curated Snapshot Jobs.","description":"Lists the Curated Snapshot Jobs.","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CSListJobResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_500"}}}}}}},"/curatedsnapshot/v1/jobs/{jobID}":{"get":{"tags":["Curated Snapshots"],"security":[{"Bearer":[]}],"parameters":[{"name":"jobID","in":"path","required":true,"description":"Specify the job ID of the Curated Snapshot to view its details. \nGet the Job ID using the 'List all the Curated Snapshots.' API.","schema":{"type":"string"}}],"summary":"List the details of the Curated Snapshot job.","description":"Lists the details of Curated Snapshot job specified according to jobID.","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CSGetJobResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_500"}}}}}}},"/curatedsnapshot/v1/jobs/cancel":{"put":{"tags":["Curated Snapshots"],"security":[{"Bearer":[]}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CSJobCancelParams"}}},"description":"List of the ongoing jobs you intend to cancel."},"summary":"Cancel the ongoing Curated Snapshot job.","description":"Cancels the ongoing Curated Snapshot job.","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CSJobCancelResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_500"}}}}}}},"/curatedsnapshot/v1/jobs/{JobID}/report":{"get":{"tags":["Curated Snapshots"],"security":[{"Bearer":[]}],"parameters":[{"name":"JobID","in":"path","required":true,"description":"Specify the job ID of the Curated Snapshot to view its report. \nGet the Job ID using the 'List all the Curated Snapshots.' API.","schema":{"type":"integer"}},{"name":"pageToken","in":"query","required":false,"description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'pageToken'.","schema":{"type":"string"}},{"name":"Accept","in":"header","required":false,"description":"Specify the content types, expressed as MIME types. The valid values can be: 'aplication/json', 'text/csv'","schema":{"type":"string","enum":["aplication/json","text/csv"]}}],"summary":"Download Report of Curated Snapshot job.","description":"Lists all the files and folders scanned while creating the Curated Snapshot.","responses":{"200":{"description":"Files and folders scanned for creating the Curated Snapshot.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CSReportResponse"}},"text/csv":{"schema":{"$ref":"#/components/schemas/CSReportResponse"}}}},"400":{"description":"Bad Request","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CS_HTTP_400"}},"text/csv":{"schema":{"$ref":"#/components/schemas/CS_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CS_HTTP_404"}},"text/csv":{"schema":{"$ref":"#/components/schemas/CS_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"application/json":{"schema":{"$ref":"#/components/schemas/CS_HTTP_500"}},"text/csv":{"schema":{"$ref":"#/components/schemas/CS_HTTP_500"}}}}}}},"/curatedsnapshot/v1/snapshots":{"get":{"tags":["Curated Snapshots"],"security":[{"Bearer":[]}],"parameters":[{"name":"sortOrder","in":"query","description":"Specify the order by which you intend to sort and list the results. Sorting can be done in ascending or descending order.","required":false,"schema":{"type":"string","enum":["asc","desc"]}},{"name":"sortBy","in":"query","description":"Specify the parameter by which you intend to sort the listed results. Sorting can be done on basis of 'jobID', 'status' parameters.","required":false,"schema":{"type":"string","enum":["jobID","status","resourceName"]}},{"name":"resourceName","in":"query","description":"Specify the resource name to filter and list the data for that specific resource name within Druva Cloud. Example - 'DOMAIN1234'.","schema":{"type":"string"}},{"name":"status[]","in":"query","description":"Specify the current status of the Curated Snapshot to filter and list the snapshots. The status can be 'Active' and 'Deleted'","required":false,"style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Active","Deleted"]}},{"name":"resourceType[]","in":"query","required":false,"description":"Specify the resource type to filter and list the data for the resource types. The resource type can be 'Endpoints', 'File Server', 'NAS', 'OneDrive', 'SharePoint'","style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Endpoints","File Server","NAS","OneDrive","SharePoint"]}},{"name":"retainedFor","in":"query","description":"Specify the time until which the Curated Snapshot will be active.","required":false,"schema":{"type":"string","format":"date","enum":["Next 24 Hours","Next 7 Days","Next 1 Month"]}},{"name":"pageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","required":false,"schema":{"type":"string"}}],"summary":"List all the Curated Snapshots.","description":"Lists all the Curated Snapshots.","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CSListSnapshotsResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_500"}}}}}},"delete":{"tags":["Curated Snapshots"],"security":[{"Bearer":[]}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CSDeleteParams"}}},"description":"List of the Curated Snapshots you intend to delete."},"summary":"Delete the Curated Snapshot.","description":"Deletes the Curated Snapshot(s).","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CSExpireSnapshotsResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/CS_HTTP_500"}}}}}}},"/threathunting/v1/search/backupset":{"post":{"summary":"Search resources for VMware resource type","description":"Find all resources available for the provided search filters.","security":[{"Bearer":[]}],"tags":["Threat Hunting"],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ThreatHuntSearchBackupsetParams"}}}},"responses":{"200":{"description":"Success","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntSearchBackupsetResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts":{"post":{"description":"Create a threat hunt for all the selected resources.","tags":["Threat Hunting"],"security":[{"Bearer":[]}],"summary":"Create a threat hunt","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ThreatHuntCreateParams"}}}},"responses":{"200":{"description":"Success","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntCreateResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}},"get":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"summary":"List all threat hunts","description":"Displays a list of all the existing threat hunts.","parameters":[{"name":"searchName","in":"query","description":"Specify the name of the threat hunt to search and list all the threat hunts that match the name.","schema":{"type":"string"}},{"description":"Specify the scan status of the threat hunt to search and list the threat hunts based on scan statuses. The status can be 'Running', 'Queued', 'Completed', 'Cancelled', or 'Failed'.","name":"scanStatus[]","in":"query","style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["Queued","Running","Failed","Cancelled","Completed"]}},{"description":"Specify the resource types and list the threat hunts based on resource types. The resource types can be 'VMware'.","name":"resourceTypes[]","in":"query","style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["VMware"]}},{"description":"Specify the scan result of the threat hunt to search and list the threat hunts based on scan results. The scan result can either be 'File matches found' or 'File matches not found'.","name":"scanResult[]","in":"query","style":"form","explode":false,"schema":{"type":"array","items":{"type":"string"},"enum":["File matches found","File matches not found"]}},{"name":"pageToken","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","in":"query","schema":{"type":"string"}}],"responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntListResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts/{threatHuntID}/cancel":{"put":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID to cancel an ongoing threat hunt. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}}],"summary":"Cancel a threat hunt","description":"Allows you to cancel an ongoing or running threat hunt job.","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntJobCancelResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts/{threatHuntID}":{"delete":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID to delete a specific threat hunt. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/ThreatHuntJobDeleteParams"}}}},"summary":"Delete a threat hunt","description":"Allows you to delete an existing non-running threat hunt job. Threat hunt, once deleted, cannot be recovered.","responses":{"200":{"description":"OK"},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}},"get":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}}],"summary":"List threat hunt configuration details","description":"You can view the configuration details provided during threat hunt creation, such as file hashes and file extensions.","responses":{"200":{"description":"OK","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntGetResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts/{threatHuntID}/summary":{"get":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"summary":"Get threat hunt summary for a specific threat hunt","description":"View the scan summary for a specific threat hunt.","parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}}],"responses":{"200":{"description":"Success","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntScanSummaryResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts/{threatHuntID}/devices":{"get":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"summary":"Lists the devices that are a part of a Threat Hunt job.","description":"Displays a list of all the devices for the selected threat hunt.","parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}},{"name":"pageToken","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","in":"query","schema":{"type":"string"}}],"responses":{"200":{"description":"Success","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntListDevicesResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts/{threatHuntID}/devices/stats":{"get":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"summary":"List statistics of devices configured for threat hunt","description":"Displays a list of statistics for all devices selected for threat hunt.","parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}},{"name":"deviceIDs[]","in":"query","description":"Specify the deviceIDs to filter device statistics.","style":"form","explode":false,"schema":{"type":"array","items":{"type":"integer"}}},{"name":"pageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"responses":{"200":{"description":"Success","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntListDevicesStatsResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}":{"get":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"summary":"Get resource details for a specific threat hunt","description":"Displays the details for the selected device ID and resource type for a specific threat hunt.","parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}},{"name":"deviceID","in":"path","description":"Specify the device ID. You can obtain the device ID using the 'List threat hunt devices API'.","required":true,"schema":{"type":"integer"}},{"name":"resourceType","in":"query","description":"Specify the resource type. The resource types can be 'VMware'.","required":true,"schema":{"type":"string","enum":["VMware"]}}],"responses":{"200":{"description":"Success","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntGetDeviceDetailsResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/stats":{"get":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"summary":"Get device statistics for a specific threat hunt","description":"Displays a list of statistics for a specific device ID and resource type for a particular threat hunt.","parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}},{"name":"deviceID","in":"path","description":"Specify the device ID. You can obtain the device ID using the 'List threat hunt devices API'.","required":true,"schema":{"type":"integer"}},{"name":"resourceType","in":"query","description":"Specify the resource type. The resource types can be 'VMware'.","required":true,"schema":{"type":"string","enum":["VMware"]}}],"responses":{"200":{"description":"Success","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntGetDeviceStatsResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/snapshots":{"get":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"summary":"List impacted snapshots for a specific threat hunt","description":"Displays a list of impacted snapshots for the selected device ID and resource type for a specific threat hunt.","parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}},{"name":"deviceID","in":"path","description":"Specify the device ID. You can obtain the device ID using the 'List threat hunt devices API'.","required":true,"schema":{"type":"integer"}},{"name":"resourceType","in":"query","description":"Specify the resource type. The resource types can be 'VMware'.","required":true,"schema":{"type":"string","enum":["VMware"]}},{"name":"pageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"responses":{"200":{"description":"Success","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntListImpactedSnapshotsResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threathunting/v1/threathunts/{threatHuntID}/report":{"get":{"tags":["Threat Hunting"],"security":[{"Bearer":[]}],"summary":"Download a report","description":"This API provides the option to download the threat hunt summary or a detailed report. The report becomes available once the threat hunt job is completed. The API provides a download URL in its response. Use the URL to download the report.","parameters":[{"name":"threatHuntID","in":"path","description":"Specify the threat hunt ID. You can obtain the ID using the 'List all threat hunts API'.","required":true,"schema":{"type":"integer"}},{"name":"reportType","in":"query","description":"Specify the report Type. The 'File' report type provides a download URL for the File Level Report, and the 'Summary' report type provides a download URL for the snapshot summary report.","required":true,"schema":{"type":"string","enum":["File","Summary"]}},{"name":"pageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","schema":{"type":"string"}}],"responses":{"200":{"description":"Success","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHuntDownloadReportResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_404"}}}},"500":{"description":"Internal Server Error","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ThreatHunt_HTTP_500"}}}}}}},"/threatintel/v1/ioc-sets":{"get":{"description":"Provides a list of all the existing IOC Sets created in the IOC library.","tags":["Threat Intel"],"security":[{"Bearer":[]}],"summary":"Listing of ioc sets","operationId":"ListIocSetRequest","parameters":[{"name":"IocType","in":"query","description":"Details of the IOC type. It can be either file hash or file extension.","required":true,"schema":{"type":"string","enum":["hash","ext"]}},{"name":"PageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","required":false,"schema":{"type":"string"}},{"name":"PageSize","in":"query","required":false,"description":"Maximum number of records to be fetched and displayed.","schema":{"type":"integer"}},{"name":"SortBy","description":"Specify the parameter by which you intend to sort the listed results. Sorting can be done on the basis of 'IOC Set name', 'totalIOCs', and 'lastModifiedOn' parameters.","required":false,"in":"query","schema":{"type":"string","enum":["name","totalIOCs","lastModifiedOn"]}},{"name":"SortOrder","in":"query","description":"Specify the order you intend to sort and list the results. Sorting can be done in ascending or descending order.","required":false,"schema":{"type":"string","enum":["asc","desc"]}},{"name":"PublishedBy","in":"query","required":false,"description":"Specify the IOC Set publisher detail to list and view IOC Sets created and added by a specific publisher.","schema":{"type":"string"}}],"responses":{"200":{"description":"Displays the list all IOC Sets.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/ListIocSetResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_404"}}}},"500":{"description":"Internal error.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_500"}}}}}},"post":{"description":"Creates a new IOC Set.","tags":["Threat Intel"],"security":[{"Bearer":[]}],"summary":"Creates a new IOC set.","operationId":"CreateIOCSetRequest","requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/CreateIOCSetRequestBody"}}},"required":true},"responses":{"200":{"description":"IOC Set created successfully.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/IOCSetResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_404"}}}},"500":{"description":"Internal error.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_500"}}}}}}},"/threatintel/v1/ioc-sets/iocs":{"get":{"description":"Lists all the IOCs that matches the specified parameters.","tags":["Threat Intel"],"security":[{"Bearer":[]}],"summary":"Lists all the IOCs that matches the specified parameters.","operationId":"GetIOCsRequest","parameters":[{"name":"IOCSetIDs","in":"query","required":false,"description":"Lists all the IOC Sets for the specified IDs to view their IOCs.","style":"form","explode":false,"schema":{"type":"array","items":{"type":"integer"}}},{"name":"PublisherType","in":"query","required":false,"description":"List IOC Sets based on the Publisher administrator.","schema":{"type":"string"}},{"name":"IOCSetName","in":"query","required":false,"description":"Lists IOCs based on the IOC Set name.","schema":{"type":"string"}},{"name":"IOCSetType","in":"query","required":false,"description":"File hashes or file extensions to be fetched and displayed.","schema":{"type":"string","enum":["hash","ext"]}},{"name":"SortOrder","in":"query","description":"Specify the order you intend to sort and list the results. Sorting can be done in ascending or descending order.","required":false,"schema":{"type":"string","enum":["asc","desc"]}},{"name":"PageSize","in":"query","required":false,"description":"Maximum number of records to be fetched and displayed.","schema":{"type":"integer"}},{"name":"PageToken","in":"query","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.","required":false,"schema":{"type":"string"}}],"responses":{"200":{"description":"","content":{"*/*":{"schema":{"$ref":"#/components/schemas/GetIOCsResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_404"}}}},"500":{"description":"Internal error.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_500"}}}}}}},"/threatintel/v1/ioc-sets/{iocsetid}":{"get":{"description":"Details of a specific IOC Set.","tags":["Threat Intel"],"security":[{"Bearer":[]}],"summary":"Details of ioc set","operationId":"IocSetDetailsRequest","parameters":[{"name":"iocsetid","in":"path","required":true,"description":"Specify the IOC Set ID to view the details.","schema":{"type":"integer"}}],"responses":{"200":{"description":"","content":{"*/*":{"schema":{"$ref":"#/components/schemas/IocSetDetailsResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_404"}}}},"500":{"description":"Internal error.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_500"}}}}}},"delete":{"description":"Allows you to delete an existing IOC Set and also all the IOCs in it.","tags":["Threat Intel"],"security":[{"Bearer":[]}],"summary":"Delete an existing IOC Set.","operationId":"DeleteIocSetRequest","parameters":[{"name":"iocsetid","in":"path","required":true,"description":"Specify the IOC Set ID to delete its details.","schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeleteIocSetBody"}}},"required":true},"responses":{"200":{"description":"Ioc set deleted successfully.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/DeleteIocSetResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_404"}}}},"500":{"description":"Internal error.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_500"}}}}}},"patch":{"description":"Allows you to update the details of the existing IOC Sets and also to add new IOCs to IOC Sets.","tags":["Threat Intel"],"security":[{"Bearer":[]}],"summary":"Updates existing IOC Set","operationId":"UpdateIocSetRequest","parameters":[{"name":"iocsetid","in":"path","required":true,"description":"Specify the IOC set ID to update the details.","schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/UpdateIocSetRequestBody"}}}},"responses":{"200":{"description":"IOC Set updated successfully.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/IOCSetResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_404"}}}},"500":{"description":"Internal error.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_500"}}}}}}},"/threatintel/v1/ioc-sets/{iocsetid}/iocs":{"delete":{"description":"Delete IOCs from the specified IOC Set.","tags":["Threat Intel"],"security":[{"Bearer":[]}],"summary":"Deletes IOCs from IOC Set","operationId":"DeleteIocsRequest","parameters":[{"name":"iocsetid","in":"path","required":true,"description":"Specify the IOC set ID whose IOCs needs to be deleted.","schema":{"type":"integer"}}],"requestBody":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/DeleteIocsRequestBody"}}},"required":true},"responses":{"200":{"description":"","content":{"*/*":{"schema":{"$ref":"#/components/schemas/DeleteIocsResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_404"}}}},"500":{"description":"Internal error.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_500"}}}}}}},"/threatintel/v1/ioc/lookup":{"get":{"description":"Check if the specified IOC exists in any of the existing IOC Sets.","tags":["Threat Intel"],"security":[{"Bearer":[]}],"summary":"Check if the specified IOC exists in any of the existing IOC Sets.","operationId":"IocLookupRequest","parameters":[{"name":"IocValue","in":"query","required":true,"description":"The IOC that needs to be searched in the IOC Sets.","schema":{"type":"string"}}],"responses":{"200":{"description":"","content":{"*/*":{"schema":{"$ref":"#/components/schemas/IocLookupResponse"}}}},"400":{"description":"Bad Request","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_400"}}}},"401":{"description":"The request either did not include an authentication token, or you have provided an expired authentication token."},"404":{"description":"The requested resource was not found.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_404"}}}},"500":{"description":"Internal error.","content":{"*/*":{"schema":{"$ref":"#/components/schemas/TI_HTTP_500"}}}}}}}},"servers":[{"url":"https://govapis.druva.com/realize"}],"components":{"requestBodies":{"createQuarantineRangeV2RequestSchema":{"content":{"application/json":{"schema":{"$ref":"#/components/schemas/createQuarantineRangeV2RequestSchema"}}},"required":true}},"securitySchemes":{"OAuth2":{"type":"oauth2","flows":{"clientCredentials":{"tokenUrl":"https://govapis.druva.com/token","scopes":{"read":"Grants read access"}}}},"Bearer":{"type":"apiKey","name":"Authorization","in":"header"}},"schemas":{"searchResponse":{"type":"object","properties":{"resources":{"type":"array","items":{"type":"object","properties":{"resourceID":{"type":"integer","description":"The unique ID of the resource in Druva Cloud.","example":101},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"resourceName":{"type":"string","description":"Specify the resource name to filter and list the specific resource name within Druva Cloud. Example - 'DOMAIN1234'.","example":"DOMAIN1234"},"resourceParent":{"type":"string","description":"Name of the user in case of a device or Server Name in case of a backup set which is quarantined. Example for Devices - Ernie Carter","example":"Ernie Carter"},"resourceType":{"type":"string","description":"The type of resource. A resource can be one of the following types - \nEndpoint,OneDrive,SharePoint,File Server,NAS,VMware","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]},"resourceStatus":{"type":"string","description":"The backup status of the resource in Druva Cloud. Status can be one of the following -\nEnabled - The resource is enabled for backup. \nDisabled - The resource is disabled for backup.","enum":["Enabled","Disabled"]}}}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of results.","example":20},"isLast":{"type":"boolean","description":"An identifier to identify if the returned page is the last page of results. Value can be one of the following - \nTrue - Is last page of results. \nFalse - There are more results available. Use 'nextPageToken' value to get the next list of results."}}},"quarantineRangeCreateRequest":{"type":"object","required":["resourceType"],"properties":{"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"resourceType":{"type":"string","description":"Select the resource type. \n Select Endpoint if you want to quarantine snapshots on a device. \nSelect File Server, NAS, VMware respectively if you want to quarantine snapshots on server data sources.","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]},"fromDate":{"type":"string","format":"date","description":"Specify a date from which you want to quarantine all the snapshots. Format - YYYY-MM-DD \n Example - 2020-10-25. \n:fa-info-circle: If you do not specify a date Druva will quarantine all the snapshots after November 10, 2019 (a system-defined limit). \n Druva uses UTC time zone to quarantine a resource. You must factor in the difference between the resource time zone and UTC zone while selecting the dates.","example":"2020-10-25"},"toDate":{"type":"string","format":"date","description":"Specify the date until which you want to quarantine the snapshots on the resource. Format - YYYY-MM-DD. \n Example - 2020-04-01 \n:fa-info-circle: If you do not specify a date Druva will keep quarantining all the snapshots formed on the resource indefinitely.","example":"2020-10-25"}}},"quarantineRangeUpdateRequest":{"type":"object","properties":{"fromDate":{"type":"string","format":"date","description":"Specify a date from which you want to quarantine all the snapshots. Format - YYYY-MM-DD\n  Example - 2020-10-25.\n:fa-info-circle: If you do not specify a date Druva will quarantine all the snapshots after November 10, 2019 (a system-defined limit).\n    Druva uses UTC time zone to quarantine a resource. You must factor in the difference between the resource time zone and UTC zone while selecting the dates.","example":"2020-09-25"},"toDate":{"type":"string","format":"date","description":"Specify the date until which you want to quarantine the snapshots on the resource. Format - YYYY-MM-DD.\n  Example - 2020-04-01 \n:fa-info-circle: If you do not specify a date Druva will keep quarantining all the snapshots formed on the resource indefinitely.","example":"2020-10-25"}}},"quarantineRangeCreateResponse":{"type":"object","properties":{"rangeID":{"type":"integer","description":"The unique identifier of the quarantine range which is created or updated for the resource.","example":101}}},"quarantineRangeListResponse":{"type":"object","properties":{"quarantineRanges":{"type":"array","items":{"type":"object","properties":{"resourceID":{"type":"integer","description":"The unique identifier of the resource, a device or a backup set, which is quarantined. Example - 101.","example":101},"rangeID":{"type":"integer","description":"The unique identifier of the quarantine range for the quarantined resource. Example - 101.","example":101},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"resourceName":{"type":"string","description":"Name of the quarantined resource. Example - Ernie Carter's Macbook.","example":"Ernie Carter's Macbook."},"resourceParent":{"type":"string","description":"Name of the device user in case of a device","example":"Ernie Carter"},"resourcePlatform":{"type":"string","description":"The operating system on the quarantined resource. Example - linux","example":"linux"},"resourceType":{"type":"string","description":"The type of resource. A resource can be one of the following types:\nEndpoint \nOneDrive \nSharePoint \nFile Server \nNAS \nVMware and so on","example":"Endpoint"},"workload":{"type":"string","description":"The type of workload. A workload can be one of the following types:\nendpoint \nonedrive \nsharepoint \nfileserver \nnas \nvmware, and so on","example":"endpoints"},"fromDate":{"type":"string","format":"date","description":"Lists the start date of the quarantine range. Example - 2020-01-25","example":"2020-10-25"},"toDate":{"type":"string","format":"date","description":"Lists the end date of the quarantine change. If the administrator has not defined any end date, empty string is returned.","example":"2020-10-25"}}}},"errorMessage":{"type":"string","description":"Error Message if any.","example":"Message of the error seen while listing quarantined range."},"nextPageToken":{"type":"integer","description":"The token to access the next page of results. This parameter will be empty for the last page of results.","example":20},"isLast":{"type":"boolean","description":"An identifier to identify if the returned page is the last page of results. Value can be one of the following - \nTrue - Is last page of results. \nFalse - There are more results available. Use 'nextPageToken' value to get the next list of results.","example":true}}},"quarantineRangeGetResponse":{"type":"object","properties":{"resourceID":{"type":"integer","description":"The unique identifier of the resource or a device which is quarantined. Example - 101","example":101},"rangeID":{"type":"integer","description":"The unique identifier of the quarantine range for the quarantined resource. Example - 101.","example":101},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":101},"resourceName":{"type":"string","description":"Name of the quarantined resource. Example - Ernie Carter's Macbook.","example":"Ernie Carter's Macbook"},"resourceParent":{"type":"string","description":"Name of the device user which is quarantined. Example - Ernie Carter","example":"Ernie Carter"},"resourcePlatform":{"type":"string","description":"The operating system on the quarantined resource. Example - linux","example":"linux"},"resourceType":{"type":"string","description":"The type of resource. A resource can be one of the following types:\nEndpoint \nOneDrive \nSharePoint \nFile Server \nNAS \nVMware and so on","example":"Endpoint"},"workload":{"type":"string","description":"The type of workload. A workload can be one of the following types:\nendpoint \noneDrive \nsharePoint \nfileserver \nnas \nvmware, and so on","example":"endpoints"},"fromDate":{"type":"string","format":"date","description":"Lists the start date of the quarantine range. Example - 2020-01-25.","example":"2020-10-25"},"toDate":{"type":"string","format":"date","description":"Lists the end date of the quarantine change. If the administrator has not defined any end date, empty string is returned.","example":"2020-10-25"},"addedTime":{"type":"string","format":"date","description":"The date and time when the quarantine range was created. Format - YYYY-MM-DDTHH:MM:SSZ \n  Example - 2020-01-02T15:04:05Z","example":"2020-01-02T15:04:05Z"},"dataLock":{"type":"boolean","description":"Resource is data locked or not, if true, cannot delete the quarantined snapshots","example":"false"}}},"snapshotListResponse":{"type":"object","properties":{"snapshots":{"type":"array","items":{"type":"object","properties":{"snapshotID":{"type":"integer","description":"Unique ID of the snapshot. Example - Mjk4OC1GcmkgTm9Tk=XXXX","example":"Mjk4OC1GcmkgTm92IDIyIDExOjEzOjU5IDIwMTk="},"status":{"type":"string","description":"The current status of the snapshot. Status can be one of the following - \nSnapshot Quarantined - Data cannot be downloaded or restored from the snapshot. \nSnapshot Available - Data is available for download or restore from the snapshot.","example":"Snapshot Quarantined","enum":["Snapshot Quarantined","Snapshot Available"]},"snapshotName":{"type":"string","description":"The snapshot's name is the date and time it was created.If no data anomaly details are present,the snapshot name may be empty. Example - Nov 21 2019, 14:39","example":"Nov 21 2019, 14:39"},"name":{"type":"string","description":"Name of the snapshot. Snapshot name is the date and the time on which it was created. Example - Nov 21 2019, 14:39","example":"Nov 21 2019, 14:39"},"alertTypes":{"type":"array","description":"The type of Data Anomalies alert for the snapshot. Value can be any of the following -\nCreation - A large number of files created in a short span \nModification - A large number of files edited or modified.\nDeletion - Several files got deleted from the snapshot.\nEncryption - Files encrypted and are inaccessible.","items":{"type":"string","enum":["Creation","Deletion","Modification","Encryption"],"example":"Creation"}},"createdFiles":{"type":"integer","description":"The total number of files created in the snapshot.","example":0},"deletedFiles":{"type":"integer","description":"The total number of files deleted in the snapshot.","example":0},"updatedFiles":{"type":"integer","description":"The total number of files modified in the snapshot.","example":0},"encryptedFiles":{"type":"integer","description":"The total number of files encrypted in the snapshot. Displays 100+ if the number of encrypted files is more than 100.","example":0},"totalFilesImpacted":{"type":"integer","description":"The total number of files created, deleted or modified in the snapshot.","example":0},"snapshotSize":{"type":"integer","description":"Snapshot size, in bytes.","example":0}}}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of results.","example":"20"},"isLast":{"type":"boolean","description":"An identifier to identify if the returned page is the last page of results. Value can be one of the following - True - Is last page of results. False - There are more results available. Use 'nextPageToken' value to get the next list of results."}}},"deleteSnapshotSchema":{"type":"object","properties":{"deleteReason":{"type":"string","minLength":10,"maxLength":150,"example":"Probable infection point"}}},"listResourceCverStats":{"type":"object","properties":{"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"resourceID":{"type":"integer","description":"The unique identifier of the resource, a device or a backup set on which Data Anomalies is detected.","example":101},"resourceName":{"type":"string","description":"Name of the resource on which Data Anomalies are detected. Example - Ernie Carter's Macbook.","example":"Ernie Carter's Macbook"},"resourceParentName":{"type":"string","description":"Name of the device user which is quarantined. Example - Ernie Carter","example":"Ernie Carter"},"resourcePlatform":{"type":"string","description":"The operating system of the resource. Example - linux.","example":"linux"},"workload":{"type":"string","enum":["endpoints","sharepoint","onedrive"]},"resourceType":{"type":"string","description":"The type of the resource. A resource can be one of the following types -\n  - Endpoint\n  - SharePoint\n  - OneDrive.","enum":["Endpoint","SharePoint","OneDrive"]},"totalAlerts":{"type":"integer","description":"The total number of Data Anomalies alerts occurred in the last 30 days."},"activeAlerts":{"type":"integer","description":"The total number of Data Anomalies alerts on which no action has been taken for the past 30 days."},"siteType":{"type":"string","description":"Site type for Sharepoint sites."},"siteUrl":{"type":"string","description":"The URL of the SharePoint site."},"resourceUrl":{"type":"string","description":"The url that redirects to the product user interface (UI) of the resource."},"stats":{"type":"array","items":{"type":"object","properties":{"alertTime":{"type":"string","description":"The date and time on which the Data Anomalies alert was observed in the snapshot. Example - Nov 21 2019, 14:39'"},"alertTimestamp":{"type":"string","description":"Date and time when the alert got generated in YYYY-MM-DD'T'hh:mm:ss'Z' format."},"snapshotTime":{"type":"string","description":"Date and time when the snapshot got created in YYYY-MM-DD'T'hh:mm:ss'Z' format."},"isLogAvailable":{"type":"boolean","description":"True, if activity logs are available for download."},"unscannedDetails":{"type":"string","description":"The reason for the Data Anomaly scan not being performed on the selected snapshot."},"isQuarantined":{"type":"boolean","description":"True, if the resource is quarantined; else, false."},"snapsphotStatus":{"type":"integer","description":"Provides details of the status of the snapshot - 0 for Unscanned, 1 for Scanned, and 2 for Impacted snapshots."},"alertTypes":{"type":"array","items":{"type":"string","description":"The type of Data Anomalies alert for the snapshot. Value can be any of the following -\nCreation - A large number of files created in a short span \nModification - A large number of files edited or modified.\nDeletion - Several files got deleted from the snapshot.\nEncryption - Files encrypted and are inaccessible."}},"snapshotID":{"type":"string","description":"The unique ID of the snapshot. Example - Mjk4OC1GcmkgTm92IDIyIDExOjEzOjU5IDIwMTk=","example":"Mjk4OC1GcmkgTm92IDIyIDExOjEzOjU5IDIwMTk="},"snapshotName":{"type":"string","description":"Name of the snapshot for which the Data Anomalies alert occurred. Snapshot name is the date and the time on which it was created. Example - Nov 21 2019, 14:39","example":"Nov 21 2019, 14:39."},"snapshotSize":{"type":"string","description":"Snapshot size, in bytes, for which the Data Anomalies alert was generated."},"totalFiles":{"type":"integer","description":"The total number of live files in the snapshot."},"totalFilesImpacted":{"type":"integer","description":"The total number of files created, deleted or modified in the snapshot."},"alertMetadata":{"type":"object","properties":{"created":{"type":"object","properties":{"files":{"type":"integer","description":"Number of files created."},"baseline":{"type":"integer","description":"Baseline for creation for the selected snapshot."},"deviation":{"type":"string","description":"Percent deviation from baseline. The format is '+20%'."},"filePerChange":{"type":"string","description":"Percent deviation from baseline. The format is '+5%'."},"isAlert":{"type":"boolean","description":"True, if there is a creation alert generated for the selected snapshot."}}},"updated":{"type":"object","properties":{"files":{"type":"integer","description":"Number of files updated."},"baseline":{"type":"integer","description":"Baseline for updation for the selected snapshot."},"deviation":{"type":"string","description":"Percent deviation from baseline. The format is '+20%'."},"filePerChange":{"type":"string","description":"Percent deviation from baseline. The format is '+5%'."},"isAlert":{"type":"boolean","description":"True, if there is a modification alert generated for the selected snapshot."}}},"deleted":{"type":"object","properties":{"files":{"type":"integer","description":"Number of files deleted."},"baseline":{"type":"integer","description":"Baseline for deletion for the selected snapshot."},"deviation":{"type":"string","description":"Percent deviation from baseline. The format is '+20%'."},"filePerChange":{"type":"string","description":"Percent deviation from baseline. The format is '+5%'."},"isAlert":{"type":"boolean","description":"True, if there is a deletion alert generated for the selected snapshot."}}},"encrpted":{"type":"object","properties":{"files":{"type":"integer","description":"The number of files encrypted. This field is displayed only when an encryption alert gets generated."},"baseline":{"type":"integer"},"deviation":{"type":"string"},"filePerChange":{"type":"string"},"isAlert":{"type":"boolean","description":"True, if there is an encryption alert generated for the selected snapshot."}}}}},"status":{"type":"string","description":"Status of the Data Anomalies alert.\nDisplays as Active if the Data Anomalies are detected on a snapshot.\nDisplays as Resolved if an action is taken on the Data Anomalies."},"actionTaken":{"type":"string","description":"TThe action that was taken on the Data Anomalies alert. Value can be one of the following -\n  - Quarantined\n  - Ignored\n  - No Action"}}}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of results.","example":"20"},"isLast":{"type":"boolean","description":"An identifier to identify if the returned page is the last page of results. Value can be one of the following - \n  True - Is last page of results.\n  False - There are more results available. Use 'nextPageToken' value to get the next list of results."}}},"SettingsResponse":{"type":"object","properties":{"AVScanEnabled":{"type":"boolean","description":"Boolean denoting if Anti Virus (AV) scan is enabled.","example":"True"},"fileHashScanEnabled":{"type":"boolean","description":"Boolean denoting if scan for File Hash is enabled.","example":"False"},"allowAdminToSkipScanEndpoints":{"type":"boolean","description":"Boolean denoting if inSync administrator is allowed to enable or disable Restore scans for Endpoints.","example":"True"},"allowUserToSkipScanEndpoints":{"type":"boolean","description":"Boolean denoting if inSync Client user is allowed to enable or disable Restore scans for Endpoints.","example":"False"},"skipScanForDeviceReplace":{"type":"boolean","description":"Boolean denoting if the Anti Virus Scan should be skipped for endpoint's device replace restore scenario.","example":"False"},"useDruvaCuratedIOCs":{"type":"boolean","description":"Boolean denoting if Druva-published IOC libraries are used for scanning.","example":"True"},"useLightScan":{"type":"boolean","description":"Boolean denoting if Quick Scan is enabled.","example":"True"},"excludeExtensionsFromScan":{"type":"array","items":{"type":"string"},"description":"Array of Strings(File Extensions)skipped from the scan.","example":[".exe",".dll",".tmp"]},"maxFileSizeToScanInMB":{"type":"integer","description":"Integer denoting maximum file size (between 100 and 1024) in MBs that should be scanned.","example":200},"daysBeyondWhichToSkipScan":{"type":"integer","description":"Integer denoting the number of days (value can be 0, 30, 60, or 90) within which the last modified date of a file should be for it to be scanned. Enter 0 if you want to scan all the files.","example":30}}},"SettingsRequest":{"type":"object","properties":{"AVScanEnabled":{"type":"boolean","description":"Boolean denoting if Anti Virus (AV) scan is enabled.","example":"True"},"fileHashScanEnabled":{"type":"boolean","description":"Boolean denoting if scan for File Hash is enabled.","example":"True"},"allowAdminToSkipScanEndpoints":{"type":"boolean","description":"Boolean denoting if inSync administrator is allowed to enable or disable Restore scans for Endpoints.","example":"True"},"allowUserToSkipScanEndpoints":{"type":"boolean","description":"Boolean denoting if inSync Client User is allowed to enable or disable Restore scans for Endpoints.","example":"True"},"skipScanForDeviceReplace":{"type":"boolean","description":"Boolean denoting if the Anti Virus Scan should be skipped for endpoint's device replace restore scenario.","example":"False"},"useDruvaCuratedIOCs":{"type":"boolean","description":"Boolean denoting if Druva-published IOC libraries are used for scanning.","example":"True"},"useLightScan":{"type":"boolean","description":"Boolean denoting if Quick Scan is enabled.","example":"True"},"excludeExtensionsFromScan":{"type":"array","items":{"type":"string"},"description":"Array of Strings(File Extensions)skipped from the scan.","example":[".exe",".dll",".tmp"]},"maxFileSizeToScanInMB":{"type":"integer","description":"Integer denoting maximum file size (between 100 and 1024) in MBs that should be scanned.","example":200},"daysBeyondWhichToSkipScan":{"type":"integer","description":"Integer denoting the number of days (value can be 0, 30, 60, or 90) within which the last modified date of a file should be for it to be scanned. Enter 0 if you want to scan all the files.","example":30}}},"jobListModel":{"type":"object","properties":{"jobs":{"type":"array","items":{"type":"object","properties":{"scanJobID":{"type":"integer","description":"Restore scans Job ID.","example":831},"globalCustomerID":{"type":"string","description":"Global Customer ID.","example":"10293"},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":123},"orgName":{"type":"string","description":"The Phoenix organization name for the resource. For inSync workloads, this field is not applicable.","example":"Default Organization"},"productID":{"type":"integer","description":"inSync or Phoenix Product ID.","example":12289},"productJobType":{"type":"string","description":"Type of restore job created in inSync or Phoenix.","example":"Restore"},"resourceType":{"type":"string","description":"Type of resource for which restore job is created in inSync or Phoenix.","example":"Endpoint"},"resourceID":{"type":"integer","description":"ID of resource for which restore job is created in inSync or Phoenix.","example":1234},"resourceName":{"type":"string","description":"Name of resource for which restore job is created in inSync or Phoenix.","example":"Ernie Carter Macbook"},"addTime":{"type":"string","description":"Creation time of Restore scans job.","example":"2021-04-12T09:33:55Z"},"endTime":{"type":"string","description":"The time when the scan job was completed.","example":"2021-04-12T09:33:55Z"},"jobType":{"type":"string","description":"Type of Restore scans job.","example":"Restore Scan"},"statusCode":{"type":"integer","description":"Status code for Restore scans job.","example":2},"status":{"type":"string","description":"Status for Restore scans job.","example":"Successful"},"deviceName":{"type":"string","description":"Resource Name for which Restore scans job is executed.","example":"Ernie Carter's Macbook."},"ResourceURL":{"type":"string","description":"Link to resource for which Restore scans job is executed.","example":""},"RestoreJobURL":{"type":"string","description":"Link to product Restore Job corresponding to Restore scans job.","example":""}}}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of the results. For example - eyJpZCI6NTY1NX0=","example":"eyJpZCI6NTY1NX0="},"totalItems":{"type":"integer","description":"Total jobs present in the response.","example":38}}},"jobDetailsModel":{"type":"object","properties":{"scanJobID":{"type":"integer","description":"Restore scans Job ID.","example":831},"customerID":{"type":"integer","description":"Customer ID.","example":2},"globalCustomerID":{"type":"string","description":"Global Customer ID.","example":"10293"},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"orgName":{"type":"string","description":"The Phoenix organization name for the resource. For inSync workloads, this field is not applicable.","example":"Default Organization"},"userID":{"type":"integer","description":"User ID in case of user-specific apps.","example":1},"userName":{"type":"string","description":"User Name in case of user-specific apps.","example":"Ernie Carter"},"csetID":{"type":"integer","description":"Cset ID in case of user-specific apps.","example":123},"deviceID":{"type":"integer","description":"Resource ID for which Restore scans job is executed.","example":123},"deviceName":{"type":"string","description":"Resource Name for which Restore scans job is executed.","example":"Ernie Carter's Macbook."},"productID":{"type":"integer","description":"inSync or Phoenix Product ID.","example":8193},"productJobType":{"type":"string","description":"Type of restore job created in inSync or Phoenix.","example":"Restore"},"resourceType":{"type":"string","description":"Type of resource for which restore job is created in inSync or Phoenix.","example":"Endpoint"},"resourceID":{"type":"integer","description":"ID of resource for which restore job is created in inSync or Phoenix.","example":1},"resourceName":{"type":"string","description":"Name of resource for which restore job is created in inSync or Phoenix.","example":"Ernie Carter's Macbook."},"restoreJobID":{"type":"integer","description":"Restore Job ID created in inSync or Phoenix.","example":1},"addTime":{"type":"string","description":"Creation time of Restore scans job.","example":"2021-04-12T09:33:55Z"},"startTime":{"type":"string","description":"Start time of Restore scans job.","example":"2021-04-12T09:33:55Z"},"lastUpdatedTime":{"type":"string","description":"Last Updated time of Restore scans job.","example":"2021-04-12T09:33:55Z"},"endTime":{"type":"string","description":"The time when the scan job was completed.","example":"2021-04-12T09:33:55Z"},"compactedTime":{"type":"string","description":"Compaction time of Restore scans job.","example":"2021-04-12T09:33:55Z"},"jobType":{"type":"string","description":"Type of Restore scans job.","example":"Restore Scan"},"houstonJobID":{"type":"integer","description":"H+ Job ID for restore scan job.","example":123},"attemptNo":{"type":"integer","description":"Number of attempts of restore scans job","example":1},"statusCode":{"type":"integer","example":1,"description":"Status code for Restore scans job."},"status":{"type":"string","description":"Status for Restore scans job.","example":"Successful"},"workloadName":{"type":"string","description":"Worklaod Name for which restore scans job is created.","example":"Endpoint"},"restoreSPaths":{"type":"string","description":"Restore Paths which needs to be restored in inSync or Phoenix.","example":""},"storageTableName":{"type":"string","description":"Storage Table Name of the resource.","example":"storage_us_east_1_123"},"storageID":{"type":"integer","description":"Storage ID of the resource","example":1},"filesProcessed":{"type":"integer","description":"Number of processed files during restore scans job.","example":1000},"affectedFiles":{"type":"integer","description":"Number of malicious files found during restore scans job.","example":10},"skippedFiles":{"type":"integer","description":"Number of skipped files found during restore scans job.","example":20},"createdByID":{"type":"integer","description":"ID of Administrator.","example":123},"createdByName":{"type":"string","description":"Full name of Administrator.","example":"Druva Cloud Admin"},"createdByType":{"type":"string","description":"Creator Type","example":"Admin"},"createdByGlobalID":{"type":"string","description":"Global ID of Administrator.","example":"12345"},"ResourceURL":{"type":"string","description":"Link to resource for which Restore scans job is executed.","example":""},"RestoreJobURL":{"type":"string","description":"Link to product Restore Job corresponding to Restore scans job.","example":""},"deletedFiles":{"type":"integer","description":"Number of deleted files found in case of Sandbox Recovery.","example":0},"deleteMaliciousFiles":{"type":"boolean","description":"Boolean denoting the status of malicious files for Sandbox Recovery. This is true if the malicious files need to be deleted.","example":false},"quickRestoreScanSettings":{"type":"object","description":"Displays the parameters set for Quick Scan if the feature is enabled","properties":{"useLightScan":{"type":"boolean","description":"Boolean denoting if Quick Scan is enabled.","example":"True"},"excludeExtensionsFromScan":{"type":"array","items":{"type":"string"},"description":"Array of Strings(File Extensions)skipped from the scan.","example":[".exe",".dll",".tmp"]},"maxFileSizeToScanInMB":{"type":"integer","description":"Integer denoting maximum file size (between 100 and 1024) in MBs that should be scanned.","example":200},"daysBeyondWhichToSkipScan":{"type":"integer","description":"Integer denoting the number of days (value can be 0, 30, 60, or 90) within which the last modified date of a file should be for it to be scanned. Enter 0 if you want to scan all the files.","example":30}}}}},"jobFilesDetailsResponse":{"type":"object","properties":{"nextPageToken":{"type":"string"},"details":{"type":"array","items":{"type":"object","properties":{"path":{"type":"string","description":"The path of the scanned file.","example":"C:/Backup_Folder/file1.pdf"},"ver":{"type":"integer","format":"int32","description":"The version of the scanned file.","example":16},"mTime":{"type":"string","format":"date-time","description":"The modification time of the scanned file.","example":"Jul 8 2021 03:51"},"sha1Hash":{"type":"string","description":"SHA1 sum of the scanned file.","example":"077eb3024604928da9a5c70c0efefd805819e7da"},"size":{"type":"integer","format":"int64","description":"Size of the scanned file.","example":10240},"unique_id":{"type":"string","description":"Unique ID of the scanned file.","example":"d4702061-e783-46da-9161-ed9a10209c6a-33693:43:1:15"},"sha1Match":{"type":"boolean","description":"True in case the SHA1sum matches for.","example":"true"},"sha1MatchAgainst":{"type":"string","description":"Uploaded SHA1 ID against which File SHA1 matched.","example":"077eb3024604928da9a5c70c0efefd805819e7da"},"virusFound":{"type":"boolean","description":"True in case virus found for the file.","example":"false"},"virusName":{"type":"string","description":"Name of the virus if found.","example":""},"isSkipped":{"type":"boolean","description":"True in case the file could not be scanned and hence was skipped from restore","example":"false"},"reasonToSkip":{"type":"string","description":"The reason to skip the file scan.","example":"File size is more than 1 GB"},"status":{"type":"integer","description":"Status of the file deletion. Applicable only in case of a Sandbox Recovery Job. Possible status values are '1' and '2' which indicates that the 'file was deleted' and 'file was not deleted' respectively.","example":2}}}},"ContentType":{"type":"string","example":"application/json"}}},"getJobCount":{"type":"object","properties":{"totalJobs":{"type":"integer","description":"The total count of restore scan jobs. Example - 50","example":5},"countByResourceType":{"type":"object","properties":{"Endpoint":{"type":"integer","description":"The total count of restore scan jobs for Endpoints. Example - 20","example":"20"},"File Server":{"type":"integer","description":"The total count of restore scan jobs for File Servers. Example - 20","example":"20"},"NAS":{"type":"integer","description":"The total count of restore scan jobs for NAS. Example - 30","example":"30"},"VMware":{"type":"integer","description":"The total count of restore scan jobs for VMware. Example - 25","example":"25"}}}}},"ListEventsResponse":{"type":"object","required":["events","nextPageToken"],"properties":{"events":{"type":"array","items":{"type":"object","properties":{"id":{"type":"integer","description":"The unique id of the event in Druva Realize. For example - 20","example":20},"area":{"type":"string","description":"The part of the product from where the event generated. For example - Platform.","example":"Platform"},"category":{"type":"string","description":"The category of the product area from where the event generated. For example - Admin Event.","example":"Admin Event"},"type":{"type":"string","description":"The type of the generated event. This is usually an action that took place for that event category. For example - Admin Login.","example":"Admin Login"},"occurenceTime":{"type":"integer","description":"The epoch time when the event was generated. For example - 1610707530.","example":1610707530},"syslogSeverity":{"type":"integer","description":"The severity level mentioned in the Sys Log. For example - 6.","example":6},"syslogFacility":{"type":"integer","description":"The facility code mentioned in the Sys Log. For example - 23.","example":23},"details":{"type":"object","description":"Specific details of the event and the source from where the event generated. These are generic.","properties":{"location":{"type":"string","example":"Pune, India"},"adminName":{"type":"string","example":"Druva Cloud Admin"},"adminEmail":{"type":"string","example":"cloud.admin@druva.com"},"loginResult":{"type":"string","example":"Success"},"adminActivity":{"type":"string","example":"Admin Login Event"},"adminIPAddress":{"type":"string","example":"192.168.0.100"},"adminLoginTime":{"type":"string","example":"2021-07-27T05:46:55Z"}}}}}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of the results. For example - eyJpZCI6NTY1NX0=","example":"eyJpZCI6NTY1NX0="}}},"ListEventsByTrackerResponse":{"type":"object","required":["events","nextTrackerToken"],"properties":{"events":{"type":"array","items":{"type":"object","properties":{"id":{"type":"integer","description":"The unique ID of the event. For example - 20","example":20},"area":{"type":"string","description":"The segment of the product from where the event is generated. For example - Platform.","example":"Platform"},"category":{"type":"string","description":"The category of the product from where the event is generated. For example - Admin Event.","example":"Admin Event"},"type":{"type":"string","description":"The type of event - action performed for that event category. For example - Admin Login.","example":"Admin Login"},"occurenceTime":{"type":"integer","description":"The epoch time when the event was generated. For example - 1610707530.","example":1610707530},"syslogSeverity":{"type":"integer","description":"The severity level mentioned in the Sys Log. For example - 6.","example":6},"syslogFacility":{"type":"integer","description":"The facility code mentioned in the Sys Log. For example - 23.","example":23},"details":{"type":"object","description":"Specific details of the event and the source from where the event got generated.","properties":{"location":{"type":"string","example":"Pune, India"},"adminName":{"type":"string","example":"Cloud Admin"},"adminEmail":{"type":"string","example":"cloud.admin@druva.com"},"loginResult":{"type":"string","example":"Success"},"adminActivity":{"type":"string","example":"Admin Login Event"},"adminIPAddress":{"type":"string","example":"192.168.0.100"},"adminLoginTime":{"type":"string","example":"2021-07-27T05:46:55Z"}}}}}},"nextTrackerToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of the results. For example - eyJpZCI6NTY1NX0=","example":"eyJpZCI6NTY1NX0="}}},"EventFilters":{"type":"object","title":"EventFilters","properties":{"event_type_name":{"type":"string","example":"Admin Login"}}},"CSJobCreationParams":{"type":"object","required":["ssRangestartDate","ssRangeEndDate","retentionPeriod"],"properties":{"ssRangestartDate":{"type":"string","format":"date","description":"Start date from which snapshots are considered for creation of Curated Snapshot","example":"2020-10-25T00:00:00Z"},"ssRangeEndDate":{"type":"string","format":"date","description":"End date till when snapshots are considered for creation of Curated Snapshot","example":"2020-10-29T23:59:59Z"},"retentionPeriod":{"type":"integer","description":"Number of days for which Curated Snapshot is to be retained for.","example":1},"excludeFileExtentions":{"type":"boolean","example":true,"default":false,"description":"Boolean flag to include files extensions for exclusion based on the added extensions."},"fileExtentions":{"type":"array","description":"File extensions which are to be excluded from Curated Snapshot.","items":{"type":"string","example":".txt"}},"matchCaseSensitiveExtensions":{"type":"boolean","example":false,"description":"If set to true, it performs a case-sensitive comparison of excluded extensions. By default, it uses case-insensitive comparison."},"replaceExistingSnapshot":{"type":"boolean","example":false,"default":false,"description":"Flag to decide if existing Curated Snapshot should be replaced by a newer one."},"resources":{"type":"array","items":{"type":"object","properties":{"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"workload":{"type":"string","enum":["endpoints","onedrive","sharepoint","fileserver","nas"],"description":"Specify the workload for which you want to create the Curated Snapshot","example":"endpoints"},"resourceType":{"type":"string","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS"],"description":"Specify the resource type for which you want to create the Curated Snapshot","example":"Endpoint"},"resourceID":{"type":"integer","description":"ID of resource for which restore job is created in inSync.","example":1234},"resourceName":{"type":"string","description":"Name of resource for which restore job is created in inSync. Ensure that you have entered the correct resource name associated with the resource ID mentioned in the above parameter. For example, enter Ernie Carter's Macbook if resource ID 1234 is associated with Ernie Carter's Macbook.","example":"Ernie Carter's Macbook"},"resourceParentName":{"type":"string","description":"Name of the user's device, in case of a device, or Server Name in case of a backup set which is quarantined. Example - Ernie Carter","example":"Ernie Carter"}}}},"useLightScan":{"type":"boolean","example":true,"description":"Boolean flag to enable Quick Scan for Curated Snapshot creation."},"maxScanFileSizeLimitInMB":{"type":"integer","example":100,"description":"Maximum file size limit in MB (between 100 to 1024) for Curated Snapshot creation."}}},"CSJobCreationResponse":{"type":"object","properties":{"jobIDs":{"type":"array","items":{"type":"integer","format":"int64"},"description":"The jobs started for Curated Snapshot creation.","example":[1,2]},"errorList":{"type":"array","items":{"$ref":"#/components/schemas/JobCreationError"},"description":"List of resources for which an error was encountered during job creation."}}},"JobCreationError":{"type":"object","properties":{"resource":{"$ref":"#/components/schemas/Resource"},"error":{"$ref":"#/components/schemas/JobModelError"}}},"Resource":{"type":"object","properties":{"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"workload":{"type":"string","enum":["fileserver","nas","endpoints","onedrive","sharepoint"],"description":"Specify the workload for which you want to create the Curated Snapshot","example":"endpoints"},"resourceType":{"type":"string","enum":["Endpoint","File Server","NAS","OneDrive","SharePoint"],"description":"Specify the resource type for which you want to create the Curated Snapshot","example":"endpoints"},"resourceID":{"type":"integer","description":"ID of resource for which restore job is created in inSync or Phoenix.","example":1234},"resourceName":{"type":"string","description":"Name of the resource for which the restore job is created in inSync or Phoenix. Ensure that you have entered the correct resource name associated with the resource ID mentioned in the above parameter. For example, enter Ernie Carter's MacBook if the resource ID 1234 is associated with Ernie Carter's MacBook.","example":"Ernie Carter's Macbook"},"resourceParentName":{"type":"string","description":"Name of the user's device, in case of a device, or Server Name in case of a backup set which is quarantined. Example - Ernie Carter","example":"Ernie Carter"}}},"JobModelError":{"type":"object","properties":{"errorCode":{"type":"string","description":"Error code seen when Curated Snapshot job could not be created."},"errorMessage":{"type":"string","description":"Error message seen when Curated Snapshot job could not be created."},"errorDescription":{"type":"string","description":"Detailed error description explaining the error when Curated Snapshot job could not be created."}}},"CSJobCancelResponse":{"type":"object","properties":{"jobs":{"type":"array","items":{"type":"object","properties":{"jobID":{"type":"integer","example":1,"description":"Curated Snapshot job ID."},"isSucessful":{"type":"boolean","example":true,"description":"Success status of cancelling running Curated Snapshot job."},"reason":{"type":"string","example":"Internal Error","description":"Failure reason to cancel the running Curated Snapshot job."}}}}}},"CSGetJobResponse":{"type":"object","properties":{"job":{"type":"object","properties":{"jobID":{"type":"integer","description":"ID of Curated Snapshot Job.","example":1},"globalCustomerID":{"type":"string","description":"Global Customer ID.","example":"10293"},"productID":{"type":"integer","description":"inSync or Phoenix Product ID.","example":12289},"createdByName":{"type":"string","description":"Full name of Administrator.","example":"Cloud Admin"},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"orgName":{"type":"string","description":"The Phoenix organization name for the resource. For inSync workloads, this field is not applicable.","example":"Default Organization"},"workload":{"type":"string","description":"Specify the workload for which you want to create the Curated Snapshot","example":"endpoints"},"resourceID":{"type":"integer","description":"ID of resource for which restore job is created in inSync or Phoenix.","example":1234},"resourceName":{"type":"string","description":"Name of resource for which restore job is created in inSync or Phoenix.","example":"Ernie Carter's Macbook"},"resourceType":{"type":"string","description":"Type of resource for which restore job is created in inSync or Phoenix.","example":"Endpoint"},"resourceParentName":{"type":"string","description":"Name of the device user in case of a device or Server Name in case of a backup set. Example - Ernie Carter","example":"Ernie Carter"},"platformType":{"type":"string","description":"","example":""},"addTime":{"type":"string","description":"Creation time of Curated Snapdhot job.","example":"2021-04-12T09:33:55Z"},"endTime":{"type":"string","description":"Completion time of Curated Snapdhot job.","example":"2021-04-12T09:35:15Z"},"jobType":{"type":"string","example":"Synthetic Snapshot","description":"Type of job."},"statusCode":{"type":"integer","description":"Status code for Curated Snapshot job.","example":3},"status":{"type":"string","description":"Status for Curated Snapshot job.","example":"Failed"},"resourceURL":{"type":"string","description":"Link to resource for which Curated Snapshot job is executed.","example":""},"restoreURL":{"type":"string","description":"Link to resource for which Curated Snapshot job is executed.","example":""},"error":{"type":"object","properties":{"errorCode":{"type":"string","example":"","description":"Code of the error seen while Curated Snapshot job is in progress."},"errorMessage":{"type":"string","example":"","description":"Message of the error seen while Curated Snapshot job is in progress."},"errorDescription":{"type":"string","example":"","description":"Provides details of the error encountered when the Curated Snapshot job is in progress."}}},"useLightScan":{"type":"boolean","description":"Boolean flag to denote if Quick Scan was enabled for Curated Snapshot.","example":true}}},"snapshot":{"type":"object","properties":{"jobID":{"type":"string","description":"ID of Curated Snapshot Job.","example":1},"ssRangeStartDate":{"type":"string","format":"date","description":"Start date from which snapshots are considered for creation of Curated Snapshot","example":"2020-10-25T00:00:00Z"},"ssRangeEndDate":{"type":"string","format":"date","description":"End date till when snapshots are considered for creation of Curated Snapshot","example":"2020-10-29T:23:59:59Z"},"expiry":{"type":"string","format":"date","description":"Date till when Curated Snapshot is retained.","example":"2020-11-28T:23:59:59Z"},"enableAVScan":{"type":"boolean","example":true,"description":"Flag stating if AV Scan is enabled while creating Curated Snapshot. This is always True"},"excludeFileHashes":{"type":"boolean","example":true,"description":"Flag stating if File Hash Scan is enabled while creating Curated Snapshot. This is always True"},"excludeFileExtentions":{"type":"boolean","example":true,"description":"Boolean flag to include files extensions for exclusion based on the added extensions."},"fileExtentions":{"type":"array","items":{"type":"string","example":".txt"}},"replaceExistingSnapshot":{"type":"boolean","example":true,"description":"Flag to decide if existing Curated Snapshot should be replaced by a newer one."},"virtualSnapshotID":{"type":"string","description":"Base-64 encoded name of Curated Snapshot created by the job.","example":"dmlydHVhbF9Nb24gQXVnIDMwIDA2OjQxOjE3IDIwMjE="},"virtualSnapshotIDEpoch":{"type":"integer","description":"Epoch timestamp of Curated Snapshot created by the job.","example":129080982},"virtualSnapshotName":{"type":"string","description":"Storage name of Curated Snapshot created by the job.","example":"virtual_Mon Aug 30 06:41:17 2021"},"displaySnapshotName":{"type":"string","description":"Display name of Curated Snapshot created by the job.","example":"Aug 30, 2021 06:41"},"size":{"type":"integer","description":"Size of Curated Snapshot created in bytes.","example":10240},"statusCode":{"type":"integer","description":"Status code for Curated Snapshot job.","example":1},"status":{"type":"string","description":"Status for Curated Snapshot job.","example":"Failed"},"filesIncluded":{"type":"integer","description":"Files included in Curated Snapshot.","example":100},"filesScanSkipped":{"type":"integer","description":"Files skipped from scan by Scan Engine","example":1},"filesExcluded":{"type":"integer","description":"Files excluded with extension exclusion from Curated Snapshot by Scan Engine.","example":5},"filesBlocked":{"type":"integer","description":"Files blocked be Scan service while creating Curated Snapshot.","example":5},"filesEncrypted":{"type":"integer","description":"Files excluded from Curated Snapshot as they were found to be encrypted.","example":5},"scanSkipBeyondStartDate":{"type":"boolean","description":"Boolean flag used to denote if the scan is skipped for files modified before the start date of the snapshot range.","example":true},"maxScanFileSizeLimitInMB":{"type":"integer","description":"Integer value used to denote the maximum file size limit in MB (between 100 to 1024) for Curated Snapshot creation.","example":100}}}}},"CSListJobResponse":{"type":"object","properties":{"jobs":{"type":"array","items":{"type":"object","properties":{"jobID":{"type":"integer","description":"ID of Curated Snapshot Job.","example":1},"globalCustomerID":{"type":"string","description":"Global Customer ID.","example":"10293"},"productID":{"type":"integer","description":"inSync or Phoenix Product ID.","example":12289},"createdByName":{"type":"string","description":"Full name of Administrator.","example":"Cloud Admin"},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"orgName":{"type":"string","description":"The Phoenix organization name for the resource. For inSync workloads, this field is not applicable.","example":"Default Organization"},"workload":{"type":"string","description":"Specify the workload for which you want to create the Curated Snapshot","example":"endpoints"},"resourceID":{"type":"integer","description":"ID of resource for which restore job is created in inSync.","example":1234},"resourceName":{"type":"string","description":"Name of resource for which restore job is created in inSync.","example":"Ernie Carter's Macbook"},"resourceType":{"type":"string","description":"Type of resource for which restore job is created in inSync.","example":"Endpoint"},"resourceParentName":{"type":"string","description":"Name of the device user in case of a device or Server Name in case of a backup set. Example - Ernie Carter","example":"Ernie Carter"},"platformType":{"type":"string","description":"","example":""},"addTime":{"type":"string","description":"Creation time of Curated Snapdhot job.","example":"2021-04-12T09:33:55Z"},"endTime":{"type":"string","description":"Completion time of Curated Snapdhot job.","example":"2021-04-12T10:33:55Z"},"jobType":{"type":"string","example":"Synthetic Snapshot","description":"Type of job."},"statusCode":{"type":"integer","description":"Status code for Curated Snapshot job.","example":2},"status":{"type":"string","description":"Status for Curated Snapshot job.","example":"Running"},"resourceURL":{"type":"string","description":"Link to resource for which Curated Snapshot job is executed.","example":""},"restoreURL":{"type":"string","description":"Link to resource for which Curated Snapshot job is executed.","example":""},"error":{"type":"object","properties":{"errorCode":{"type":"string","example":"","description":"Code of the error seen while Curated Snapshot job is in progress."},"errorMessage":{"type":"string","example":"","description":"Message of the error seen while Curated Snapshot job is in progress."},"errorDescription":{"type":"string","example":"","description":"Description of the error seen while Curated Snapshot job is in progress."}}},"useLightScan":{"type":"boolean","example":true,"description":"Boolean flag to denote if Quick Scan was enabled for Curated Snapshot."}}}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of the results. For example - eyJpZCI6NTY1NX0=","example":"eyJpZCI6NTY1NX0="},"totalItems":{"type":"integer","description":"Total jobs present in the response.","example":38}}},"CSListSnapshotsResponse":{"type":"object","properties":{"snapshots":{"type":"array","items":{"type":"object","properties":{"jobID":{"type":"integer","example":1,"description":"ID of Curated Snapshot Job."},"resourceID":{"type":"integer","description":"ID of resource for which restore job is created in inSync or Phoenix.","example":1234},"resourceName":{"type":"string","description":"Name of resource for which restore job is created in inSync or Phoenix.","example":"Ernie Carter's Macbook"},"resourceType":{"type":"string","description":"Type of resource for which restore job is created in inSync or Phoenix.","example":"Endpoint"},"resourceURL":{"type":"string","description":"Link to resource for which Curated Snapshot job is executed.","example":""},"restoreURL":{"type":"string","description":"Link to resource for which Curated Snapshot job is executed.","example":""},"platformType":{"type":"string","description":"","example":""},"ssRangeStartDate":{"type":"string","format":"date","description":"Start date from which snapshots are considered for creation of Curated Snapshot","example":"2020-10-25T00:00:00Z"},"ssRangeEndDate":{"type":"string","format":"date","description":"End date till when snapshots are considered for creation of Curated Snapshot","example":"2020-10-29T:23:59:59Z"},"expiry":{"type":"string","format":"date","description":"Date till when Curated Snapshot is retained.","example":"2020-11-28T:23:59:59Z"},"enableAVScan":{"type":"boolean","example":true,"description":"Flag stating if AV Scan is enabled while creating Curated Snapshot. This is always True"},"excludeFileHashes":{"type":"boolean","example":true,"description":"Flag stating if File Hash Scan is enabled while creating Curated Snapshot. This is always True"},"excludeFileExtentions":{"type":"boolean","example":false,"description":"Boolean flag to include files extensions for exclusion based on the added extensions."},"fileExtentions":{"type":"array","items":{"type":"string","example":".txt"}},"replaceExistingSnapshot":{"type":"boolean","example":true,"description":"Flag to decide if existing Curated Snapshot should be replaced by a newer one."},"virtualSnapshotID":{"type":"string","description":"Base-64 encoded name of Curated Snapshot created by the job.","example":"dmlydHVhbF9Nb24gQXVnIDMwIDA2OjQxOjE3IDIwMjE="},"virtualSnapshotEpoch":{"type":"integer","description":"Epoch timestamp of Curated Snapshot created by the job.","example":129080982},"virtualSnapshotName":{"type":"string","description":"Storage name of Curated Snapshot created by the job.","example":"virtual_Mon Aug 30 06:41:17 2021"},"displaySnapshotName":{"type":"string","description":"Display name of Curated Snapshot created by the job.","example":"Aug 30, 2021 06:41"},"size":{"type":"integer","description":"Size of Curated Snapshot created in bytes.","example":10240},"statusCode":{"type":"integer","example":1,"description":"Current status code of Curated Snapshot."},"status":{"type":"string","example":"Active","description":"Current status of Curated Snapshot."},"filesIncluded":{"type":"integer","description":"Files included in Curated Snapshot.","example":100},"filesScanedSkipped":{"type":"integer","description":"Files skipped from scan by Scan Engine","example":1},"filesExcluded":{"type":"integer","description":"Files excluded with extension exclusion from Curated Snapshot by Scan Engine.","example":5},"filesBlocked":{"type":"integer","description":"Files blocked be Scan service while creating Curated Snapshot.","example":5},"filesEncrypted":{"type":"integer","description":"Files excluded from Curated Snapshot as they were found to be encrypted","example":5}}}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of the results. For example - eyJpZCI6NTY1NX0=","example":"eyJpZCI6NTY1NX0="},"totalItems":{"type":"integer","description":"Total snapshots present in the response.","example":87}}},"CSExpireSnapshotsResponse":{"type":"object","properties":{"expiredSnapshots":{"type":"array","items":{"type":"object","properties":{"virtualSnapshotID":{"type":"string","description":"Base-64 encoded name of Curated Snapshot created by the job.","example":"dmlydHVhbF9Nb24gQXVnIDMwIDA2OjQxOjE3IDIwMjE="},"isSucessful":{"type":"boolean","example":true,"description":"Curated Snapshot deletion is successful."},"reason":{"type":"string","description":"Reason for failure in Curated Snapshot deletion.","example":"Internal Error"}}}}}},"CSJobCancelParams":{"type":"object","properties":{"jobIDs":{"type":"array","items":{"type":"integer"},"example":[1]}}},"CSDeleteParams":{"type":"object","required":["virtualSnapshotIDs"],"properties":{"virtualSnapshotIDs":{"type":"string","description":"Specify the virtualSnapshotID of Curated Snapshot that you want to delete. \nGet the virtualSnapshotID using the 'List all the Curated Snapshots.' API.","example":["dmlydHVhbF9UaHUgSnVsIDIyIDA4OjQxOjMzIDIwMjE="]},"deleteReason":{"type":"string","description":"The reason for deletion.","example":"Restored Data from Curated Snapshot","minLength":10,"maxLength":150}}},"CSReportResponse":{"type":"object","properties":{"details":{"type":"array","items":{"type":"object","properties":{"fileName":{"type":"string","description":"Name of the file scanned.","example":"file1.csv"},"fileType":{"type":"string","example":"File","description":"Type of file or folder scanned.","enum":["File","Folder"]},"mTime":{"type":"string","format":"date-time","description":"File Modified Time.","example":""},"fileCver":{"type":"integer","format":"int32","description":"Version of file scanned.","example":17},"path":{"type":"string","example":"D:/a/b/a.txt","description":"The path of the scanned file."},"ssName":{"type":"string","description":"Name of Curated Snapshot for which files were scanned.","example":"Fri Sep  3 17:42:47 2021"},"isSkipped":{"type":"boolean","example":true,"description":"Boolean depicting if version of the file scanned is skipped."},"reasonToSkip":{"type":"string","description":"Reason with which the file version scanned is skipped.","example":"Encrypted file found"}}}},"pageToken":{"type":"string","description":"The token to access the next page of results."},"ContentType":{"type":"string","example":"*/*"}}},"HTTP_400":{"type":"object","properties":{"code":{"type":"integer","enum":["ransomware-1001","RealizeUda-1001"]},"message":{"type":"string","enum":["Invalid API Syntax"]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"HTTP_404":{"type":"object","properties":{"code":{"type":"integer","enum":["ransomware-1002","RealizeUda-1002"]},"message":{"type":"string","enum":["The requested resource was not found."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"HTTP_422":{"type":"object","properties":{"code":{"type":"integer","enum":["ransomware-1003","RealizeUda-1003"]},"message":{"type":"string","enum":["Unprocessable entity"]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"HTTP_500":{"type":"object","description":"The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time.","properties":{"code":{"type":"integer","enum":["ransomware-1004","RealizeUda-1004"]},"message":{"type":"string","enum":["The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"ErrorResponse":{"type":"object","title":"Error","properties":{"code":{"type":"string"},"message":{"type":"string"},"retryable":{"type":"boolean"},"data":{"type":"object"}}},"RWC_HTTP_400":{"type":"object","properties":{"code":{"type":"string","enum":["RWCMaster-1002","RWCMaster-1102"]},"message":{"type":"string","enum":["Invalid API Syntax","Invalid Resource Type"]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"RWC_HTTP_404":{"type":"object","properties":{"code":{"type":"string","enum":["RWCMaster-1003"]},"message":{"type":"string","enum":["The requested resource was not found."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"RWC_HTTP_500":{"type":"object","description":"The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time.","properties":{"code":{"type":"string","enum":["RWCMaster-1000"]},"message":{"type":"string","enum":["The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"CS_HTTP_400":{"type":"object","properties":{"code":{"type":"string","enum":["RWCMaster-1006"]},"message":{"type":"string","enum":["Invalid API Syntax"]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"CS_HTTP_404":{"type":"object","properties":{"code":{"type":"string","enum":["RWCMaster-1003"]},"message":{"type":"string","enum":["The requested resource was not found."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"CS_HTTP_500":{"type":"object","description":"The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time.","properties":{"code":{"type":"string","enum":["RWCMaster-1000"]},"message":{"type":"string","enum":["The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"RR_HTTP_400":{"type":"object","properties":{"code":{"type":"integer","enum":["RansomwareRR-1111","RansomwareRR-1102"]},"message":{"type":"string","enum":["Invalid API Syntax","Invalid Resource Type"]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"RR_HTTP_404":{"type":"object","properties":{"code":{"type":"integer","enum":["RansomwareRR-1003","RansomwareRR-1101","RansomwareRR-1122"]},"message":{"type":"string","enum":["The requested resource was not found.","The requested resource ID was invalid.","The requested quarantine range was not found."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"RR_HTTP_500":{"type":"object","description":"The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time.","properties":{"code":{"type":"integer","enum":["RansomwareRR-1000"]},"message":{"type":"string","enum":["The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"ThreatHuntSearchBackupsetResponse":{"type":"object","properties":{"resources":{"type":"array","items":{"type":"object","properties":{"resourceName":{"type":"string","description":"Name of the resource. In case of VMware, resource name will be VM name. Example - Ernie Carter's VM."},"resourceType":{"type":"string","description":"Name of the resource type. Example - VMware, Endpoint, File Server. Currently, only the VMware resource type is supported."},"resourceID":{"type":"integer","description":"Unique identifier for a resource."},"resourceParentName":{"type":"string","description":"The name of the ESXI in the case of VMware and Server Name in the case of the of a backup set. For example, 172.16.14.43."},"resourceParentID":{"type":"integer","description":"Unique identifier of the parent resource. Unique identifier for ESXI FQDN in case of VMware."},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1."},"lastIndexedSnapshot":{"type":"string","description":"Last indexed snapshot for this resource. The threat hunt scan will run until this snapshot."},"lastSnapshot":{"type":"string","description":"The last snapshot whose backup has successfully been completed in Druva Cloud."}}}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of results."}}},"ThreatHuntSearchBackupsetParams":{"type":"object","properties":{"resourceName":{"type":"string","description":"Specify the complete name or a prefix for the device name, hostname, or server name to search and list the devices, hostnames, or servers. Example - “My” is the prefix in the device name “MyDevice123”."},"orgIDs":{"type":"array","description":"Specify the Phoenix organization ID for the resource. For inSync workloads, value will be -1.","items":{"type":"integer","example":1}},"resourceParentIDs":{"type":"array","description":"Specify the ResourceParentID. In the case of VMware, the resource parent ID is ESXI host or Vcenter.","items":{"type":"integer","example":1}},"resourceTypes":{"type":"array","description":"Specify the resource type. Currently, VMware resource type is supported.","items":{"type":"string","example":"VMware"}},"pageToken":{"type":"string","description":"The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'."}}},"ThreatHuntDownloadReportResponse":{"type":"object","properties":{"downloadLink":{"type":"string","description":"Download URL for the requested report type."}}},"ThreatHuntListImpactedSnapshotsResponse":{"type":"object","properties":{"threatHuntID":{"type":"integer","description":"The identifier to uniquely identify threat hunt."},"deviceID":{"type":"integer","description":"Unique identifier for a device."},"resourceType":{"type":"string","description":"Name of resource type. The resource types can be 'VMware'."},"totalSnapshots":{"type":"integer","description":"Count of total snapshots for this resource."},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of results."},"snapshots":{"type":"array","items":{"type":"object","properties":{"snapshotID":{"type":"string","description":"The unique ID of the snapshot. Example - Mjk4OC1GcmkgTm92IDIyIDExOjEzOjU5IDIwMTk=.","example":"Mjk4OC1GcmkgTm92IDIyIDExOjEzOjU5IDIwMTk="},"snapshotName":{"type":"string","description":"Name of the snapshot. Example - Nov 21 2019, 14:39:34.","example":"Nov 21 2019, 14:39:34"},"size":{"type":"integer","description":"The size of the snapshot in bytes."},"isQuarantined":{"type":"boolean","description":"This field will indicate if snapshot is quarantined or not."},"totalFilesScanned":{"type":"integer","description":"Count of total files present in the snapshot."},"totalFileHashesFound":{"type":"integer","description":"Count of files matched against custom file hashes."},"totalPredefinedFileHashesFound":{"type":"integer","description":"Count of files matched against predefined Threat-Intel file hashes."},"totalFileExtensionsFound":{"type":"integer","description":"Count of files matched against custom file extensions."},"totalPredefinedFileExtensionsFound":{"type":"integer","description":"Count of files matched against predefined Threat-Intel file extensions."}}}}}},"ThreatHuntGetDeviceStatsResponse":{"type":"object","properties":{"threatHuntID":{"type":"integer","description":"The identifier to uniquely identify threat hunt."},"deviceID":{"type":"integer","description":"Unique identifier for a device."},"resourceType":{"type":"string","description":"Name of the resource type. The resource types can be 'VMware'."},"totalSnapshots":{"type":"integer","description":"Count of total snapshots for this resource."},"totalFilesImpacted":{"type":"integer","description":"Count of impacted files against which threat was identified for this resource."},"impactedSnapshots":{"type":"integer","description":"Count of impacted snapshots against which threat was identified for this resource."},"totalQuarantinedSnapshots":{"type":"integer","description":"Count of impacted snapshots that were quarantined."},"firstImpactedSnapshot":{"type":"string","description":"Name of the first impacted snapshot. Example - Nov 21 2019, 14:39:34.","example":"Nov 21 2019, 14:39:34"},"lastImpactedSnapshot":{"type":"string","description":"Name of the last impacted snapshot. Example - Nov 21 2019, 14:39:34.","example":"Nov 21 2019, 14:39:34"},"firstScannedSnapshot":{"type":"string","description":"Name of the first scanned snapshot. Example - Nov 21 2019, 14:39:34.","example":"Nov 21 2019, 14:39:34"},"lastScannedSnapshot":{"type":"string","description":"Name of the last scanned snapshot. Example - Nov 21 2019, 14:39:34.","example":"Nov 21 2019, 14:39:34"},"autoQuarantineStatus":{"type":"string","description":"The auto quarantine status of the threat hunt. The status can be 'Successful,' 'Successful with errors', 'Not Applicable', or 'Failed'."},"resourceIDs":{"type":"array","description":"List of resource IDs for the selected device ID.","items":{"type":"integer"}}}},"ThreatHuntGetDeviceDetailsResponse":{"type":"object","properties":{"threatHuntID":{"type":"integer","description":"The identifier to uniquely identify threat hunt."},"deviceID":{"type":"integer","description":"Unique identifier for a device."},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1."},"resourceParentID":{"type":"integer","description":"Unique identifier of the parent resource. Unique identifier for ESXI FQDN in case of VMware."},"resourceName":{"type":"string","description":"Name of the resource. In case of VMware, resource name will be VM name. Example - Ernie Carter's VM."},"resourceType":{"type":"string","description":"Name of resource type. The resource types can be 'VMware'."},"resourceParentName":{"type":"string","description":"Resource Parent Name. In case of VMware, this will be vCenter/ESXi name."},"orgName":{"type":"string","description":"Organization Name for Enterprise Workloads. This field is empty if the organization has been deleted."},"payload":{"type":"object","description":"All other fields that belong to the selected resource. Example - {'type':'EBS'}."},"resourceIDs":{"type":"array","description":"List of resource IDs for the selected device ID.","items":{"type":"integer"}}}},"ThreatHuntListDevicesStatsResponse":{"type":"object","properties":{"threatHuntID":{"type":"integer","description":"The identifier to uniquely identify threat hunt."},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of results."},"devices":{"type":"array","items":{"type":"object","properties":{"deviceID":{"type":"integer","description":"Unique identifier for a device."},"resourceType":{"type":"string","description":"Name of resource type. The resource types can be 'VMware'."},"totalSnapshots":{"type":"integer","description":"Count of total snapshots for this resource."},"totalFilesImpacted":{"type":"integer","description":"Count of impacted files against which threat was identified for this resource."},"impactedSnapshots":{"type":"integer","description":"Count of impacted snapshots against which threat was identified for this resource."},"scannedSnapshots":{"type":"integer","description":"A count of snapshots included in the threat hunt scan for this resource."},"totalQuarantinedSnapshots":{"type":"integer","description":"Count of impacted snapshots that were quarantined."},"firstImpactedSnapshot":{"type":"string","description":"Name of the first impacted snapshot. Example - Nov 21 2019, 14:39:34.","example":"Nov 21 2019, 14:39:34"},"lastImpactedSnapshot":{"type":"string","description":"Name of the last impacted snapshot. Example - Nov 21 2019, 14:39:34.","example":"Nov 21 2019, 14:39:34"},"latestCleanSnapshot":{"type":"string","description":"Name of the latest clean snapshot. Example - Nov 21 2019, 14:39:34.","example":"Nov 21 2019, 14:39:34"},"resourceIDs":{"type":"array","description":"List of resource IDs for the selected device ID.","items":{"type":"integer"}}}}}}},"ThreatHuntListDevicesResponse":{"type":"object","properties":{"threatHuntID":{"type":"integer","description":"The identifier to uniquely identify threat hunt."},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of results."},"totalResources":{"type":"integer","description":"Count of resources provided for threat hunt creation."},"devices":{"type":"array","items":{"type":"object","properties":{"deviceID":{"type":"integer","description":"Unique identifier for a device."},"resourceName":{"type":"string","description":"Name of the resource. In case of VMware, resource name will be VM name. Example - Ernie Carter's VM."},"resourceType":{"type":"string","description":"Name of the resource type. The resource types can be 'VMware'."},"resourceIDs":{"type":"array","description":"List of resource IDs selected for the threat hunt.","items":{"type":"integer"}},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1."},"payload":{"type":"object","description":"All other fields that belong to the selected resource. Example - {'type':'EBS'}."}}}}}},"ThreatHuntCreateResponse":{"type":"object","properties":{"threatHuntID":{"type":"integer","description":"The identifier to uniquely identify threat hunt."},"message":{"type":"string","example":"Threat hunt created successfully."},"validationFailures":{"type":"object","description":"This occurs in case of validation failure for the file hash, file extension, resources or IOC sets.","properties":{"invalidHashes":{"type":"array","description":"File hashes discarded from threat hunt creation.","items":{"type":"string","example":"abvfdinvalid"}},"excludedExtensions":{"type":"array","description":"Extensions with a length of more than 200 or extensions having more than one dot are discarded.","items":{"type":"string","example":".abc.txt.1"}},"invalidResourceIDs":{"type":"array","description":"Resources that are deleted or unavailable are discarded from threat hunt creation.","items":{"type":"integer","example":1}},"invalidIOCSets":{"type":"array","description":"IOC sets that are either deleted or invalid.","items":{"type":"integer","example":1}}}}}},"ThreatHuntCreateParams":{"type":"object","properties":{"name":{"type":"string","description":"Specify a name for the threat hunt.","example":"Lock Extension Analysis"},"description":{"type":"string","description":"Provide a description of the threat hunt.","example":"Threat hunting for lock extension analysis"},"fileHashes":{"type":"array","items":{"type":"string","example":"9032a70bc7f6c44ba2bf639b6f09b8d10b056e00"},"description":"Specify the malicious file hashes to be used for the threat hunt. Example - ['9032a70bc7f6c44ba2bf639b6f09b8d10b056e00']."},"fileExtensions":{"type":"array","items":{"type":"string","example":".wcry"},"description":"Specify the malicious file extensions to be used for the threat hunt. Example - ['.wcry']."},"threatIntelIOCSetIDs":{"type":"array","items":{"type":"integer","example":"1"},"description":"Specify the Threat-Intel IOC Set IDs list to include predefined file hashes and extensions in the threat scan. You can choose the IOC Sets from the IOC Library section under Cyber Resilience."},"autoQuarantine":{"type":"boolean","description":"Specify the boolean flag to mark snapshots as quarantined when a threat is detected after the scan completion. Currently, Auto-Quarantine is supported for VMware."},"snapshotRangeStartDate":{"type":"string","description":"Specify the start date to allow the threat hunt to scan for threats using snapshots created on this date. Format: YYYY-MM-DD.","example":"2024-10-25"},"snapshotRangeEndDate":{"type":"string","description":"Specify the end date to allow the threat hunt to use snapshots created through this date to scan for threats. Format - YYYY-MM-DD.","example":"2024-10-27"},"resourcesToScan":{"type":"object","description":"Specify the resources for creating a threat hunt and provide the resource type. Currently, VMware resource type is supported.","properties":{"<resourceType>":{"type":"array","description":"Currently, VMware resource type is supported.","items":{"type":"object","properties":{"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"deviceID":{"type":"integer","description":"ID of device for which threat hunt should be created.","example":124}}}}}}}},"ThreatHuntScanSummaryResponse":{"type":"object","properties":{"threatHuntID":{"type":"integer","description":"The identifier to uniquely identify threat hunt."},"impactedResources":{"type":"integer","description":"Count of impacted resources against which threat was identified."},"impactedDevices":{"type":"integer","description":"Count of impacted devices against which threat was identified."},"impactedSnapshots":{"type":"integer","description":"Count of impacted snapshots against which threat was identified among all provided resources."},"totalFilesImpacted":{"type":"integer","description":"Count of impacted files against which threat was identified among all provided resources."},"totalResources":{"type":"integer","description":"Count of total resources provided during threat hunt creation."},"totalDevices":{"type":"integer","description":"Count of total devices provided during threat hunt creation."},"totalSnapshots":{"type":"integer","description":"Count of total snapshots that were included in the threat hunt scan."},"scanStartedTime":{"type":"string","description":"The date and time when the threat hunt scan was started. Example - Aug 27, 2024 14:13:42.","example":"Aug 27, 2024 14:13:42"},"scanCompletedTime":{"type":"string","description":"The date and time when the threat hunt scan was completed. Example - Aug 27, 2024 14:13:42.","example":"Aug 27, 2024 14:13:42"},"scanStatus":{"type":"string","description":"The current status of the threat hunt scan. The status can be 'Running,' 'Queued,' 'Completed,' 'Cancelled,' or 'Failed'."},"skippedIocsCount":{"type":"integer","description":"The count of file hashes skipped from the threat hunt scan.","example":1},"errorCode":{"type":"string","description":"The error states that the threat hunt scan failed.","example":"THAnalyzer-1401"},"errorReason":{"type":"string","description":"Details about the reason for the threat hunt scan failure.","example":"Threat Hunt scan failed due to an internal error."}}},"ThreatHuntJobDeleteParams":{"type":"object","properties":{"deleteReason":{"type":"string","description":"Specfiy the reason why the threat hunt needs to be deleted.","example":"Finished analysis for this threat hunt."}}},"ThreatHuntListResponse":{"type":"object","properties":{"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of results."},"threathunts":{"type":"array","items":{"$ref":"#/components/schemas/ThreatHunt"}},"totalItems":{"type":"integer","description":"Total count of threat hunts created."}}},"ThreatHunt":{"type":"object","properties":{"createdOn":{"type":"string","description":"The date and time when the threat hunt was created. Format - YYYY-MM-DDTHH:MM:SSZ \n  Example - 2020-01-02T15:04:05Z.","example":"2020-01-02T15:04:05Z"},"resourceTypes":{"type":"array","description":"The resource types can be 'VMware'.","items":{"type":"string","example":"VMware"}},"description":{"type":"string","description":"The description provided during threat hunt creation."},"impactedResources":{"type":"integer","description":"Count of impacted resources against which threat was identified."},"impactedDevices":{"type":"integer","description":"Count of impacted devices against which threat was identified."},"impactedSnapshots":{"type":"integer","description":"Count of impacted snapshots against which threat was identified among all provided resources."},"jobID":{"type":"integer","format":"int64","description":"Unique Identifier for threat hunt job."},"name":{"type":"string","description":"Name of the threat hunt."},"scanStartedTime":{"type":"string","description":"The date and time when the threat hunt scan was started. Example - Aug 27, 2024 14:13:42.","example":"Aug 27, 2024 14:13:42"},"scanStatus":{"type":"string","description":"The current status of the threat hunt scan. The status can be 'Running,' 'Queued,' 'Completed,' 'Cancelled,' or 'Failed'."},"snapshotRangeEndDate":{"type":"string","description":"The end date selected while threat hunt creation. Format - YYYY-MM-DDTHH:MM:SSZ \n  Example - 2020-01-02T15:04:05Z.","example":"2020-01-02T15:04:05Z"},"snapshotRangeStartDate":{"type":"string","description":"The start date selected while threat hunt creation. Format - YYYY-MM-DDTHH:MM:SSZ \n  Example - 2020-01-02T15:04:05Z.","example":"2020-01-02T15:04:05Z"},"threatHuntID":{"type":"integer","format":"int64","description":"The identifier to uniquely identify threat hunt."},"totalFilesImpacted":{"type":"integer","description":"Count of impacted files against which threat was identified among all provided resources."},"totalResources":{"type":"integer","description":"Count of total resources provided during threat hunt creation."},"totalDevices":{"type":"integer","description":"Count of total devices provided during threat hunt creation."},"totalSnapshots":{"type":"integer","description":"Count of total snapshots that were included in the threat hunt scan."}}},"ThreatHuntJobCancelResponse":{"type":"object","properties":{"threatHuntID":{"type":"integer","example":1,"description":"The identifier to uniquely identify threat hunt."},"message":{"type":"string","example":"Threat hunt cancelled successfully."}}},"ThreatHuntGetResponse":{"type":"object","properties":{"autoQuarantine":{"type":"boolean","description":"This field states if the Auto-Quarantine option was selected. If set to true,then Auto-Quarantine was selected."},"createdBy":{"type":"string","description":"Name of the administrator who created this threat hunt."},"description":{"type":"string","description":"The description provided during threat hunt creation."},"fileExtensions":{"type":"array","description":"List of file extensions provided during threat hunt creation.","items":{"type":"string"}},"fileHashes":{"type":"array","description":"List of file hashes provided during threat hunt creation.","items":{"type":"string"}},"includePredefinedFileHash":{"type":"boolean","description":"This field states if the predefined file hashes option was selected. If set to true, then the predefined file hashes option was selected."},"threatIntelIOCs":{"type":"object","properties":{"hashSets":{"type":"array","items":{"type":"object","properties":{"id":{"type":"integer","example":1,"description":"The unique ID of the IOC Set."},"name":{"type":"string","example":"IOC Set 1","description":"The name provided for the IOC Set."},"totalIOCs":{"type":"integer","example":39,"description":"The total count of SHA-1 converted file hashes in the IOC Set."}}},"description":"Details of selected IOC sets with file hashes."},"extSets":{"type":"array","items":{"type":"object","properties":{"id":{"type":"integer","example":2,"description":"The unique ID of the IOC Set."},"name":{"type":"string","example":"IOC Set 2","description":"The name provided for the IOC Set."},"totalIOCs":{"type":"integer","example":63,"description":"The total count of file extensions in the IOC Set."}}},"description":"Details of selected IOC sets with file extensions."}},"description":"Details of all the selected IOC sets used in the Threat scan."},"name":{"type":"string","description":"Name of the threat hunt."},"resourceTypes":{"type":"array","items":{"type":"string","example":"VMware"}},"devices":{"type":"array","description":"List of devices that were a part of the threat hunt scan.","items":{"type":"object","properties":{"deviceID":{"type":"integer","example":1},"resourceType":{"type":"string","example":"VMware"},"resourceIDs":{"type":"array","description":"List of resource IDs that were part of the threat hunt scan.","items":{"type":"integer"}}}}},"snapshotRangeEndDate":{"type":"string","description":"The end date selected while threat hunt creation. Format - YYYY-MM-DD \n  Example - 2020-01-02.","example":"2020-01-02"},"snapshotRangeStartDate":{"type":"string","description":"The start date selected while threat hunt creation. Format - YYYY-MM-DD \n  Example - 2020-01-02.","example":"2020-01-02"},"threatHuntID":{"type":"integer","format":"int64","description":"The identifier to uniquely identify threat hunt."}}},"ThreatHunt_HTTP_400":{"type":"object","properties":{"code":{"type":"string","enum":["THMaster-1002"]},"message":{"type":"string","enum":["Invalid API Syntax"]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"ThreatHunt_HTTP_404":{"type":"object","properties":{"code":{"type":"string","enum":["THMaster-1003"]},"message":{"type":"string","enum":["The requested resource was not found."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"ThreatHunt_HTTP_500":{"type":"object","description":"The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time.","properties":{"code":{"type":"string","enum":["THMaster-1006"]},"message":{"type":"string","enum":["The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"RealizeCommon_HTTP_400":{"type":"object","properties":{"code":{"type":"string","enum":["realizecommon-1002"]},"message":{"type":"string","enum":["Invalid API Syntax"]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"RealizeCommon_HTTP_404":{"type":"object","properties":{"code":{"type":"string","enum":["realizecommon-1003"]},"message":{"type":"string","enum":["The requested resource was not found."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"RealizeCommon_HTTP_500":{"type":"object","description":"The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time.","properties":{"code":{"type":"string","enum":["realizecommon-1000"]},"message":{"type":"string","enum":["The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"CreateIOCSetRequestBody":{"type":"object","required":["name","iocType","iocs"],"properties":{"description":{"type":"string","example":"IOC set decription","description":"IOC set description."},"iocType":{"type":"string","example":"hash","description":"IOc set type, can be either hash / extension.","enum":["hash","ext"]},"iocs":{"type":"array","items":{"type":"string","example":"077eb3024604928da9a5c70c0efefd805819e7da"},"description":"IOCs that needs to be added in IOC set."},"name":{"type":"string","example":"Black cat IOCs","description":"IOC set name"},"source":{"type":"string","example":"IOCs of black cat ramsomware","description":"Source of IOC set."}}},"DeleteIocSetBody":{"type":"object","properties":{"deleteReason":{"type":"string","minLength":10,"maxLength":150,"example":"Outdated IOCs","description":"Reasion for deletion."}}},"DeleteIocSetResponse":{"type":"object"},"DeleteIocsRequestBody":{"type":"object","properties":{"deleteReason":{"type":"string","minLength":10,"maxLength":150,"example":"Outdated IOCs","description":"Reasion for deletion."},"iocIDs":{"type":"array","items":{"type":"integer","example":23},"description":"IOC ID that needs to be deleted. A maximum of 10 IOCs can be deleted in one delete request."}}},"DeleteIocsResponse":{"type":"object"},"GetIOCsResponse":{"type":"object","properties":{"iocs":{"type":"array","items":{"$ref":"#/components/schemas/IOCDetails"}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of the results. For example - eyJpZCI6NTY1NX0=.","example":"eyJpZCI6NTY1NX0="},"totalIocs":{"type":"integer","example":38,"description":"Total number of IOCs present in the specified IOC set."}}},"IOCDetails":{"type":"object","properties":{"addedBy":{"type":"string","example":"John Doe","description":"Name of administrator who added the IOC."},"addedTime":{"type":"string","example":"Jan 22, 2025 09:08:42","description":"Time at which this IOC was added."},"convertedIoc":{"type":"string","example":".wfwhr","description":"Corresponding SHA1 of SHA256 and MD5 hash or empty if not converted, else same as user input"},"id":{"type":"integer","example":25,"description":"Unique ID of the IOC."},"iocSetID":{"type":"integer","example":7,"description":"Unique ID of the IOC set."},"iocType":{"type":"string","example":"hash","enum":["hash","ext"],"description":"Details of the IOC type. It can be either file hash or file extension."},"iocValue":{"type":"string","example":".wfwhr","description":"IOC value added by the administrator."}}},"IOCSetResponse":{"description":"IOCSetResponse is the response structure of successful ioc create request","type":"object","properties":{"countAdded":{"type":"integer","example":12,"description":"Number of IOCs that got added in IOC set."},"countDuplicate":{"type":"integer","example":3,"description":"Number of IOCs that were duplicate and not added to IOC set."},"countSkipped":{"type":"integer","example":2,"description":"Number of IOCs that were invalid and not added to IOC set."},"countTotal":{"type":"integer","example":17,"description":"Total number of IOCs that were provided by administrator."},"iocSetID":{"type":"integer","example":7,"description":"Unique ID of the IOC set."}}},"IocLookupResponse":{"type":"object","properties":{"iocSets":{"type":"array","items":{"$ref":"#/components/schemas/IocSetForLookup"}}}},"IocSetDetailsResponse":{"type":"object","properties":{"Source":{"type":"string","example":"IOCs of black cat ramsomware","description":"Source of IOC set."},"description":{"type":"string","example":"IOC set decription","description":"IOC set description."},"id":{"type":"integer","example":7,"description":"Unique ID of the IOC set."},"iocSetType":{"type":"string","example":"hash","enum":["hash","ext"],"description":"Details of the IOC type. It can be either file hash or file extension."},"isDruvaIOCSet":{"type":"boolean","example":true,"description":"Indicates that IOC set is published by Druva. This is displayed only for customers with Threat Intel Premium license."},"lastModifiedOn":{"type":"string","example":"Jan 22, 2025 09:08:42","description":"Time at which the IOC Set was last modified or updated."},"name":{"type":"string","example":"Black cat IOCs","description":"Name of IOC set."},"publishDate":{"type":"string","example":"Jan 07, 2025 07:08:40","description":"Time at which the IOC Set was published."},"publishedBy":{"type":"string","example":"Jane Doe","description":"Name of admin who published this IOC set."}}},"IocSetForLookup":{"type":"object","properties":{"id":{"type":"integer","example":7,"description":"Unique ID of the IOC set."},"iocSetType":{"type":"string","example":"hash","enum":["hash","ext"],"description":"Type of IOC, can be either hash or extension."},"lastModifiedOn":{"type":"string","example":"Jan 22, 2025 09:08:42","description":"Time at which this IOC set was last updated."},"name":{"type":"string","example":"Black cat IOCs","description":"Name of IOC set."},"publishDate":{"type":"string","example":"Jan 07, 2025 07:08:40","description":"Time at which this IOC set was published."},"publishedBy":{"type":"string","example":"Jane Doe","description":"Name of admin who published this IOC set."}}},"ListIocSetDetails":{"type":"object","properties":{"createdTime":{"type":"string","example":"Jan 07, 2025 07:08:40","description":"Time at which this IOC set was created."},"description":{"type":"string","example":"IOC set decription","description":"IOC set description."},"id":{"type":"integer","example":7,"description":"Unique ID of the IOC set."},"iocType":{"type":"string","example":"hash","enum":["hash","ext"],"description":"Type of IOC set, can be either hash or extension."},"isDruvaIOC":{"type":"boolean","example":true,"description":"Indicates that IOC set is published by Druva, only for customers with Threat Intel Premium License."},"lastModifiedOn":{"type":"string","example":"Jan 22, 2025 09:08:42","description":"Time at which this IOC set was last updated."},"name":{"type":"string","example":"Black cat IOCs","description":"Name of IOC set."},"nonConvertedIOCs":{"type":"integer","example":12,"description":"Count to IOC that were non SHA1 and there corresponding SHA1 was not found."},"publishedBy":{"type":"string","example":"Jane Doe","description":"Name of admin who published this IOC set."},"source":{"type":"string","example":"IOCs of black cat ramsomware","description":"Source of IOC set."},"totalIOCs":{"type":"integer","example":35,"description":"Total number of IOCs in the IOC set."}}},"ListIocSetResponse":{"type":"object","properties":{"allPublishers":{"type":"array","items":{"type":"string","example":"John Doe"},"description":"Name of all the administrators who published IOC Set."},"iocSets":{"type":"array","items":{"$ref":"#/components/schemas/ListIocSetDetails"}},"nextPageToken":{"type":"string","description":"The token to access the next page of results. This parameter will be empty for the last page of the results. For example - eyJpZCI6NTY1NX0=","example":"eyJpZCI6NTY1NX0="},"totalRecords":{"type":"integer","example":27,"description":"Total number of IOC sets."}}},"UpdateIocSetRequestBody":{"description":"UpdateIocSetRequestBody is the request structure to handle IOC set create request","type":"object","properties":{"description":{"type":"string","example":"IOC set decription","description":"IOC Set description."},"iocs":{"type":"array","items":{"type":"string","example":"077eb3024604928da9a5c70c0efefd805819e7da"},"description":"IOCs that needs to be added in IOC set"},"name":{"type":"string","example":"Black cat IOCs","description":"Name of the IOC Set."},"source":{"type":"string","example":"IOCs of black cat ramsomware","description":"Source of IOC Set."}}},"TI_HTTP_400":{"type":"object","properties":{"code":{"type":"string","enum":["TIMaster-1002"]},"message":{"type":"string","enum":["Invalid API Syntax"]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"TI_HTTP_404":{"type":"object","properties":{"code":{"type":"string","enum":["TIMaster-1003"]},"message":{"type":"string","enum":["The requested resource was not found."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"TI_HTTP_500":{"type":"object","description":"The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time.","properties":{"code":{"type":"string","enum":["TIMaster-1000"]},"message":{"type":"string","enum":["The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time."]},"data":{"type":"object"},"retryable":{"type":"boolean","enum":[false,true]}}},"listQuarantinedResourcesResponseSchema":{"type":"object","properties":{"quarantinedResources":{"type":"array","items":{"type":"object","properties":{"resourceID":{"type":"integer","format":"int64"},"rangeIDs":{"type":"array","items":{"type":"object","properties":{"rangeID":{"type":"integer","format":"int64"},"fromDate":{"type":"string","format":"date"},"toDate":{"type":"string","format":"date"},"quarantineType":{"type":"integer","description":"Indicates the type of Quarantine enabled for the resource. The value 2 refers to Auto Quarantine type while 1 indicates Manual Quarantine.","example":1}}}},"resourceName":{"type":"string"},"resourceType":{"type":"string"},"orgID":{"type":"integer","format":"int32","description":"The Phoenix organization ID for the resource."}}}},"nextPageToken":{"type":"string"}}},"listDetailsOfQuarantinedResourceResponseSchema":{"type":"object","properties":{"resourceID":{"type":"integer","format":"int64"},"rangeIDs":{"type":"array","items":{"type":"object","properties":{"rangeID":{"type":"integer","format":"int64"},"fromDate":{"type":"string","format":"date"},"toDate":{"type":"string","format":"date"},"quarantineType":{"type":"integer"}}}},"orgID":{"type":"integer","format":"int32","description":"The Phoenix organization ID for the resource."},"resourceName":{"type":"string"},"resourceParent":{"type":"string"},"resourcePlatform":{"type":"string"},"resourceType":{"type":"string"},"addedTime":{"type":"string","format":"date-time"},"lastUpdatedTime":{"type":"string","format":"date-time"},"dataLock":{"type":"array","description":"Provides information related to the Data Lock status of the snapshot.","items":{"type":"object","properties":{"storageID":{"description":"Storage ID where the snapshots are backed up","type":"integer","format":"int64"},"csetID":{"description":"CSET ID where the snapshots are backed up","type":"integer","format":"int64"},"isDataLockEnabled":{"type":"boolean"}}}}}},"createQuarantineRangeV2ResponseSchema":{"type":"object","properties":{"ranges":{"type":"array","items":{"type":"object","properties":{"fromDate":{"type":"string","description":"from date","example":"2020-10-25"},"toDate":{"type":"string","description":"to date","example":"2021-10-25"}}}}}},"createQuarantineRangeV2RequestSchema":{"type":"object","properties":{"resourceType":{"type":"string","description":"Select the resource type. \n Select Endpoint if you want to quarantine snapshots on a device. \nSelect File Server, NAS, VMware respectively if you want to quarantine snapshots on server data sources.","enum":["Endpoint","OneDrive","SharePoint","File Server","NAS","VMware"]},"orgID":{"type":"integer","description":"The Phoenix organization ID for the resource. For inSync workloads, value will be -1.","example":-1},"ranges":{"type":"array","items":{"type":"object","properties":{"fromDate":{"type":"string","description":"from date","example":"2020-10-25"},"toDate":{"type":"string","description":"Leaving the field 'toDate' empty quarantines all snapshots created after the 'fromDate', including future snapshots.","example":"2021-10-25"},"quarantineType":{"type":"integer","description":"Indicates the type of Quarantine enabled for the resource. The value 2 refers to Auto Quarantine type while 1 indicates Manual Quarantine.","example":1}}}}}},"listAllQuarantinedSnapshotsForResourceResponseSchema":{"type":"object","properties":{"snapshots":{"type":"array","items":{"type":"object","properties":{"snapshotID":{"type":"string"},"snapshotName":{"type":"string"},"createdFiles":{"type":"integer","format":"int32"},"deletedFiles":{"type":"integer","format":"int32"},"updatedFiles":{"type":"integer","format":"int32"},"encryptedFiles":{"type":"integer","format":"int32"},"totalFilesImpacted":{"type":"integer","format":"int32"},"snapshotSize":{"type":"integer","format":"int64"},"quarantineType":{"type":"integer","enum":[1,2]},"snapshotEpoch":{"type":"integer","format":"int64"},"rangeID":{"type":"integer","format":"int64"},"storageID":{"type":"integer","format":"int64","description":"Provides information about the Storage ID where the snapshot is backed up."},"csetID":{"type":"integer","format":"int64","description":"Provides information about the CSET ID where the snapshot is backed up."},"isAirGapped":{"type":"boolean","description":"Indicates if the snapshot is backed up to Druva Cloud."}}}}}}}}}