Enriching Data with Have I Been Pwned?
The Have I Been Pwned enrichment enables you to assess whether an email address was put at risk due to a data breach.
Have I Been Pwned data can be leveraged on email observables from the Explore pivoting tool after activation. The enrichment returns domains that are related to breaches which impacted the email address.
Enrichment data is also available on observable details pages, as displayed in the following example.
On observable details pages, Have I Been Pwned? provides Breach and Paste information on email addresses impacted by breaches.
To activate the Have I Been Pwned? enrichment:
-
Navigate to ThreatStream > APP STORE > APP Store.
-
Locate the Have I Been Pwned? enrichment.
- Click Get Access on the Have I Been Pwned? tile.
- Click Activate.
The Have I Been Pwned? enrichment is now active.