Event Type	Documentation
`blog_post`	Blog Post
`bucket_object`	Bucket Object
`bucket`	Bucket
`document`	Ransomleak (document)
`domain`	Lookalike Domain (domain)
`experimental`	Experimental
`forum_post`	Forum Post
`forum_topic`	Forum Topic
`google`	Google
`leak`	Leaked Credentials (leak)
`listing`	Listing
`paste`	Paste
`profile`	Profile
`seller`	Seller
`source_code`	Source code
`stealer_log`	Stealer Log
`driller`, `driller_forum_topic`, `driller_forum_post`, `driller_profile`	Not intended to be directly searchable, can be found by searching the types they power like `source_code`, `google` or `forum_post`
`chat_message`	Chats that are ingested, mostly Telegram.
`attachment`	Attachments that are collected in telegram chats.
`social_media`	Social media accounts that we find related to events that match identifiers.
`experimental`	Evolving list of test sources uncovered by our research team.
`service`	Hosts with potentially exposed services that we discover on the open web.

Event Types

Categories