Intelligence Features
The intelligence section turns raw leak-site monitoring into investigation-ready context. Use it when you need to understand actors, unclaimed incidents, affected countries or sectors, known data leaks, abused vulnerabilities, and monthly changes in the extortion ecosystem.
Core Views
Section titled “Core Views”- Actor Profiles collect observed activity, evidence, victimology, screenshots, torrent coverage, and related reporting for one actor or leak-site brand.
- News Articles are manually curated items that capture relevant incidents, reporting, unclaimed events, and context that may not appear as a direct actor claim.
- Country and Sector Profiles aggregate exposure by geography and industry so you can understand concentration, recent activity, and trends.
- Abused Vulnerabilities track CVEs and KEV-style references that appear in actor reporting, exploitation context, or related intelligence.
- Data Leaks focus on events where leaked data, file listings, or publication evidence has been observed.
- Monthly Reports summarize recent activity, notable actors, source changes, and intelligence highlights for reporting workflows.
- File Leak Search searches indexed leaked file names and file-list metadata.
- Torrent Intelligence tracks torrent publications, peer observations, and recurring infrastructure.
How These Views Fit Together
Section titled “How These Views Fit Together”Start with Search when you have a single term, such as a company, actor, CVE, sector, country, or domain. Move into the intelligence views when you need a curated profile, trend, or evidence trail.
For recurring reporting, use Monthly Reports and Country or Sector Profiles. For technical investigation, use Actor Profiles, Abused Vulnerabilities, File Leak Search, and Torrent Intelligence.