The Leak Explore page allows you to search for and view analyst-curated information about the data leaks or breaches included in the DarkOwl Vision dataset. To start looking up leaks, you can start typing in the Search Bar, or you can use the Filter options on the left to View Leaks by Attack Type, Content, or Countries. You can also view data leaked by actors listed in our Actor Explore section.
All Leaks
The charts at the top of the page provide information about the leak dataset overall, including the volume of leaks, recently added leaks, leaks by country, and leaks by content. Clicking on View All Charts will bring you to an expanded visualization section showing Leaks by Content, Leaks by Host, and Leaks by Country.
- Use the drop-down to change the time period shown in the charts.
- Toggle between Leaks by Content and Leaks by Host, by selecting the drop-down on the top chart.
Individual Leaks
Clicking on an individual leak on the table will bring you to the detail page for that leak. This provides information from the DarkOwl analyst team that gives additional enrichment regarding the leak, and may include relevant dates, content information, and target information. It includes the same fields as the Leak Context feature, which is available on leak search results. Individual leaks also include actions, which include:
- Viewing the filetree in the Research section, if available
- Viewing the data in the Research section
- Downloading the Leak Context for this leak
- Clipping a link to this leak entry
- Pivoting to the Actor Explore page, if an Actor entry is available
- Pivoting to the original post or Telegram channel, if available
Leak Visualization
Clicking on the Leak Visualization tab will show an analysis of the volume and type of files contained within the leak, if available. This visualization shows the top 10 file extensions by volume found within the original files. This can help identify the scope of the data within the leak, to quickly show whether the data was from one CSV file, or included a variety of images and document types. Note: Leaks added to the DarkOwl dataset prior to April 2024 may not include this visualization feature.
Clicking the View All link will open a detail panel which will list all of the extensions included within the leaked data, and the number of files of each.
