Entity Search

Entity Search is the best way to search within our indexed document collection for Emails, Cryptocurrency, Credit Cards, CVEs, Website Mentions, IP Addresses, Users, and Social Security Numbers. Additionally, all Entity Searches can easily become Search Blocks, with Set Up Monitors options, by clicking on the Search Block icon on the upper right. You can enter one or more values in each builder, using space, comma, or semi-colon between values. Pressing Enter will execute the search.

• Emails supports searching for individual addresses, domains, or subdomains.  

• Credit Cards supports searching for individual addresses or BINs. 

• Cryptocurrencies supports searching for the following types: Bitcoin, Ethereum, Monero, Litecoin, Dash, ZCash. The types have been validated by DarkOwl Vision. Cryptocurrency wallet types not in this list can continue to be found with regular expressions.  
• Users supports searching for usernames across Discord, Telegram, and Forum sources.
• CVEs supports searching for the following formats: 
  • By full CVE-ID, i.e. CVE-2022-12345 (finds specific known CVE, using the CVE prefix) 
  • By CVE-ID, i.e. 2022-12345 (finds specific known CVE, without the CVE prefix) 
  • By Year only, i.e. 2022 (finds all CVEs from that year) 
• IP Addresses supports searching for the following formats: IPv4, IPv6/IPv6 compressed, and CIDR ranges for both IPv4 and IPv6. Note: When we find and extract IP addresses in the text of a document, we store them as an IP address object rather than a string (all of our other tokenized entities are strings). This allows for more search flexibility, such as searching for CIDR ranges. However, since the IP address being searched is not a string/text, they are not able to be highlighted when searching this way. 
• Social Security Numbers supports the following format: 123-45-6789 (with hyphens).
• Website Mentions search for mentions of websites within our data, including subdomains and results in which a domain is within a URL.