Intelligence 360

On top of Infostealer Detection endpoints: customer leaks, Phishing & Brand Protection, vulnerabilities and IOC lookup. Customer events appear only with Intelligence 360 or the Customer scope.

Access

Plan entitlementintel_customer

Scopesleak-events:read

These endpoints are the same as in Infostealer Detection. Filter customer events with type=customer; without Intelligence 360, customer events never appear in lists, counts or by-id access (404).

Tasks

Track customer leaksList credentials for your service seen on your end users’ infected machines, and track the totals.

Read brand protection findingsPull domains, phishing pages, apps and accounts impersonating your brand into your own systems.

Track vulnerabilitiesPull externally visible vulnerabilities by priority.

Monitor executivesGet alerted when accounts linked to your executives appear in a leak.

Leak events

List leak eventsGET /v1/leak-events

Get leak event statisticsGET /v1/leak-events/statistics

Get leak event detailsGET /v1/leak-events/{eventId}

Using MCP

x360_list_customer_leaksLists customer (end-user) leaks