Search Botnet Compromised Credentials - BlinkOps Documentation

Search ZeroFox’s CTI feed of credentials stolen by botnets for a specified email address.

External DocumentationTo learn more, visit the ZeroFox documentation.

Basic Parameters

Parameter	Description
Created After	The date and time to return credentials found from.
Email	The email address to search for.
Return All Pages	Automatically fetch all resources, page by page.

Advanced Parameters

Parameter	Description
Cursor	The cursor of the results page to return. You can get it from the `next` URL of a previous response.

Example Output

{
	"next": null,
	"results": [
		{
			"domain": "stark.com",
			"email": "email-address",
			"username": "natasha",
			"password": "dummy_password",
			"breach_name": "Raid Forums/XSS/Exploit: Stark Data Breach (7,409,054 Records)",
			"breach_id": "123",
			"impacted_domain": "stark-breach",
			"created_at": "2021-06-26T04:44:37.603656Z"
		}
	]
}

Workflow Library Example

Search Botnet Compromised Credentials with Zerofox and Send Results Via Email

Preview this Workflow on desktop