---
updatedAt: 2026-04-23T06:56:56.000Z
agentTools:
  projectIndex: https://developer.druva.com/llms.txt
---

# List impacted snapshots for a specific threat hunt

Displays a list of impacted snapshots for the selected device ID and resource type for a specific threat hunt.

# OpenAPI definition

```json
{
  "openapi": "3.0.0",
  "info": {
    "description": "",
    "version": "3.0.0",
    "title": "Cyber Resilience For GovCloud"
  },
  "tags": [
    {
      "name": "Threat Hunting",
      "description": "List of APIs to get information and perform operations on the resources managed in Druva Cloud for threat hunting."
    }
  ],
  "paths": {
    "/threathunting/v1/threathunts/{threatHuntID}/devices/{deviceID}/snapshots": {
      "get": {
        "tags": [
          "Threat Hunting"
        ],
        "security": [
          {
            "Bearer": []
          }
        ],
        "summary": "List impacted snapshots for a specific threat hunt",
        "description": "Displays a list of impacted snapshots for the selected device ID and resource type for a specific threat hunt.",
        "parameters": [
          {
            "name": "threatHuntID",
            "in": "path",
            "description": "Specify the threat hunt ID to view the details. You can obtain the ID using the 'List all threat hunts API'.",
            "required": true,
            "schema": {
              "type": "integer"
            }
          },
          {
            "name": "deviceID",
            "in": "path",
            "description": "Specify the device ID. You can obtain the device ID using the 'List threat hunt devices API'.",
            "required": true,
            "schema": {
              "type": "integer"
            }
          },
          {
            "name": "resourceType",
            "in": "query",
            "description": "Specify the resource type. The resource types can be 'VMware'.",
            "required": true,
            "schema": {
              "type": "string",
              "enum": [
                "VMware"
              ]
            }
          },
          {
            "name": "pageToken",
            "in": "query",
            "description": "The token to access the next page of results. Use the token value received in the previous response's parameter 'nextPageToken'.",
            "schema": {
              "type": "string"
            }
          }
        ],
        "responses": {
          "200": {
            "description": "Success",
            "content": {
              "*/*": {
                "schema": {
                  "$ref": "#/components/schemas/ThreatHuntListImpactedSnapshotsResponse"
                }
              }
            }
          },
          "400": {
            "description": "Bad Request",
            "content": {
              "*/*": {
                "schema": {
                  "$ref": "#/components/schemas/ThreatHunt_HTTP_400"
                }
              }
            }
          },
          "401": {
            "description": "The request either did not include an authentication token, or you have provided an expired authentication token."
          },
          "404": {
            "description": "The requested resource was not found.",
            "content": {
              "*/*": {
                "schema": {
                  "$ref": "#/components/schemas/ThreatHunt_HTTP_404"
                }
              }
            }
          },
          "500": {
            "description": "Internal Server Error",
            "content": {
              "*/*": {
                "schema": {
                  "$ref": "#/components/schemas/ThreatHunt_HTTP_500"
                }
              }
            }
          }
        }
      }
    }
  },
  "servers": [
    {
      "url": "https://govapis.druva.com/realize"
    }
  ],
  "components": {
    "securitySchemes": {
      "Bearer": {
        "type": "apiKey",
        "name": "Authorization",
        "in": "header"
      }
    },
    "schemas": {
      "ThreatHuntListImpactedSnapshotsResponse": {
        "type": "object",
        "properties": {
          "threatHuntID": {
            "type": "integer",
            "description": "The identifier to uniquely identify threat hunt."
          },
          "deviceID": {
            "type": "integer",
            "description": "Unique identifier for a device."
          },
          "resourceType": {
            "type": "string",
            "description": "Name of resource type. The resource types can be 'VMware'."
          },
          "totalSnapshots": {
            "type": "integer",
            "description": "Count of total snapshots for this resource."
          },
          "nextPageToken": {
            "type": "string",
            "description": "The token to access the next page of results. This parameter will be empty for the last page of results."
          },
          "snapshots": {
            "type": "array",
            "items": {
              "type": "object",
              "properties": {
                "snapshotID": {
                  "type": "string",
                  "description": "The unique ID of the snapshot. Example - Mjk4OC1GcmkgTm92IDIyIDExOjEzOjU5IDIwMTk=.",
                  "example": "Mjk4OC1GcmkgTm92IDIyIDExOjEzOjU5IDIwMTk="
                },
                "snapshotName": {
                  "type": "string",
                  "description": "Name of the snapshot. Example - Nov 21 2019, 14:39:34.",
                  "example": "Nov 21 2019, 14:39:34"
                },
                "size": {
                  "type": "integer",
                  "description": "The size of the snapshot in bytes."
                },
                "isQuarantined": {
                  "type": "boolean",
                  "description": "This field will indicate if snapshot is quarantined or not."
                },
                "totalFilesScanned": {
                  "type": "integer",
                  "description": "Count of total files present in the snapshot."
                },
                "totalFileHashesFound": {
                  "type": "integer",
                  "description": "Count of files matched against custom file hashes."
                },
                "totalPredefinedFileHashesFound": {
                  "type": "integer",
                  "description": "Count of files matched against predefined Threat-Intel file hashes."
                },
                "totalFileExtensionsFound": {
                  "type": "integer",
                  "description": "Count of files matched against custom file extensions."
                },
                "totalPredefinedFileExtensionsFound": {
                  "type": "integer",
                  "description": "Count of files matched against predefined Threat-Intel file extensions."
                }
              }
            }
          }
        }
      },
      "ThreatHunt_HTTP_400": {
        "type": "object",
        "properties": {
          "code": {
            "type": "string",
            "enum": [
              "THMaster-1002"
            ]
          },
          "message": {
            "type": "string",
            "enum": [
              "Invalid API Syntax"
            ]
          },
          "data": {
            "type": "object"
          },
          "retryable": {
            "type": "boolean",
            "enum": [
              false,
              true
            ]
          }
        }
      },
      "ThreatHunt_HTTP_404": {
        "type": "object",
        "properties": {
          "code": {
            "type": "string",
            "enum": [
              "THMaster-1003"
            ]
          },
          "message": {
            "type": "string",
            "enum": [
              "The requested resource was not found."
            ]
          },
          "data": {
            "type": "object"
          },
          "retryable": {
            "type": "boolean",
            "enum": [
              false,
              true
            ]
          }
        }
      },
      "ThreatHunt_HTTP_500": {
        "type": "object",
        "description": "The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time.",
        "properties": {
          "code": {
            "type": "string",
            "enum": [
              "THMaster-1006"
            ]
          },
          "message": {
            "type": "string",
            "enum": [
              "The request was not processed due to an internal error in Druva Cloud. Kindly try again after some time."
            ]
          },
          "data": {
            "type": "object"
          },
          "retryable": {
            "type": "boolean",
            "enum": [
              false,
              true
            ]
          }
        }
      }
    }
  }
}
```