Skip to content

Commit 5cddd3d

Browse files
maximestlaurent-flaremaximestlaurent-flare
committed
Replace leak event type with leaked_credential
1 parent be7b55f commit 5cddd3d

3 files changed

Lines changed: 133 additions & 123 deletions

File tree

‎docs/event-types/leak.mdx‎

Lines changed: 0 additions & 122 deletions
This file was deleted.

‎docs/event-types/leaked_credential.mdx‎

Lines changed: 132 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,132 @@
1+
---
2+
title: "Leaked Credentials"
3+
---
4+
5+
The `leaked_credential` event type represents a single leaked credentials, usually in the form of a `url:login:password` triplet.
6+
7+
```json Example Content
8+
{
9+
"activity": {
10+
"data": {
11+
"es_id": "425470/leaked_credential/combolists/9492d3cb916d17660421053e3a68674f",
12+
"es_score": 1,
13+
"highlights": {},
14+
"id": null,
15+
"index": "leaked_credential",
16+
"metadata": {
17+
"estimated_created_at": "2026-03-05T05:48:05.031000+00:00",
18+
"event_id": null,
19+
"first_crawled_at": "2026-03-05T05:49:52.429348+00:00",
20+
"last_crawled_at": "2026-03-05T05:49:52.429348+00:00",
21+
"payload_digest": "5f59f9014eb1121f56701d818f482091c04e1b93",
22+
"scraped_at": "2026-03-05T05:49:52.429348+00:00",
23+
"source": "combolists",
24+
"crawled_by": null,
25+
"flare_url": "https://app.flare.io/#/leaked_credential/combolists/9492d3cb916d17660421053e3a68674f"
26+
},
27+
"uid": "leaked_credential/combolists/9492d3cb916d17660421053e3a68674f",
28+
"url": null,
29+
"browser_url": null,
30+
"domain": null,
31+
"identity_name": "example_user@example.com",
32+
"imported_at": "2026-03-05T05:48:05.031000+00:00",
33+
"password": "ExamplePassword", # Only shown with the appropriate permission
34+
"source_id": "combolists",
35+
"source_name": "Combolists",
36+
"leak_id": 406285232303,
37+
"leak_source": {
38+
"id": "combolists",
39+
"name": "Combolists",
40+
"description_en": "Collection of multiple combo lists (emails and passwords) exchanged on illicit networks.",
41+
"description_fr": "Collection de multiples listes \"combos\" (adresses courriel et mots de passe) échangées sur des réseaux illicites.",
42+
"breached_at": null,
43+
"leaked_at": null,
44+
"pii_tags": []
45+
},
46+
"features": {
47+
"domains": [
48+
"example.com"
49+
],
50+
"emails": [
51+
"example_user@example.com"
52+
],
53+
"ip_addresses": null,
54+
"ip_addresses_cidr": null,
55+
"reversed_domains": [
56+
"com.example"
57+
],
58+
"urls": null,
59+
"usernames": null,
60+
"vulnerabilities": null
61+
}
62+
},
63+
"duplicates": [],
64+
"header": {
65+
"actor": null,
66+
"actor_id": null,
67+
"bank": null,
68+
"bin": null,
69+
"brand": null,
70+
"credential_count": null,
71+
"category_name": "Leaked Credential",
72+
"content_hash": "5f59f9014eb1121f56701d818f482091c04e1b93",
73+
"content_preview": "Email / Username: example_user@example.com",
74+
"country": null,
75+
"duplicates": [],
76+
"es_score": 1,
77+
"expiration": null,
78+
"highlights": {},
79+
"host": null,
80+
"id": "9492d3cb916d17660421053e3a68674f",
81+
"infection_date": null,
82+
"parent_id": null,
83+
"parent_title": null,
84+
"parent_title_en": null,
85+
"parent_uid": null,
86+
"parent_uids": [],
87+
"risk": {
88+
"score": 4
89+
},
90+
"similar_items_count": 0,
91+
"source": "combolists",
92+
"source_name": "Combolists",
93+
"target_name": "Combolists",
94+
"tags": [],
95+
"notes": null,
96+
"state_code": null,
97+
"timestamp": "2026-03-05T05:48:05.031000+00:00",
98+
"title": "",
99+
"type": "leaked_credential",
100+
"uid": "leaked_credential/combolists/9492d3cb916d17660421053e3a68674f",
101+
"user_risk_score": null,
102+
"user_notes": null,
103+
"ignored_at": null,
104+
"remediated_at": null,
105+
"verb": "",
106+
"external_url": null,
107+
"external_netloc": null,
108+
"can_have_duplicates": true,
109+
"priority_action_uuid_related": false,
110+
"analyzers_items_uids": [],
111+
"victim_name": null,
112+
"contains_secrets": null,
113+
"secrets_metadata": null,
114+
"identity_name": "example_user@example.com",
115+
"password": "ExamplePassword" # Only shown with the appropriate permission
116+
},
117+
"history_logs": null,
118+
"metadata": {
119+
"estimated_created_at": "2026-03-05T05:48:05.031000+00:00",
120+
"event_id": null,
121+
"first_crawled_at": "2026-03-05T05:49:52.429348+00:00",
122+
"last_crawled_at": "2026-03-05T05:49:52.429348+00:00",
123+
"payload_digest": "5f59f9014eb1121f56701d818f482091c04e1b93",
124+
"scraped_at": "2026-03-05T05:49:52.429348+00:00",
125+
"source": "combolists",
126+
"crawled_by": null,
127+
"flare_url": "https://app.flare.io/#/leaked_credential/combolists/9492d3cb916d17660421053e3a68674f"
128+
},
129+
"similar_items": []
130+
}
131+
}
132+
```

‎docs/event-types/overview.mdx‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ description: "Overview of all Flare API event types"
1414
| `forum_post` | [Forum Post <Icon icon="book" size={16} />](/event-types/forum-post) |
1515
| `forum_topic` | [Forum Topic <Icon icon="book" size={16} />](/event-types/forum-topic) |
1616
| `google` | [Google <Icon icon="book" size={16} />](/event-types/google) |
17-
| `leak` | [Leaked Credentials (leak) <Icon icon="book" size={16} />](/event-types/leak) |
17+
| `leaked_credential` | [Leaked Credentials <Icon icon="book" size={16} />](/event-types/leaked_credential) |
1818
| `listing` | [Listing <Icon icon="book" size={16} />](/event-types/listing) |
1919
| `paste` | [Paste <Icon icon="book" size={16} />](/event-types/paste) |
2020
| `profile` | [Profile <Icon icon="book" size={16} />](/event-types/profile) |

0 commit comments

Comments
 (0)