{"success":true,"data":{"databaseSize":91671175168,"usedDatabaseSize":58767486976,"lastUpdate":"2026-10-11T06:47:09.549464201Z","indexes":{"actor_chunks":{"numberOfDocuments":2187,"indexSize":32698368,"usedIndexSize":25370624,"rawDocumentDbSize":2576384,"avgDocumentSize":1170,"isIndexing":false,"numberOfEmbeddings":2187,"numberOfEmbeddedDocuments":2187,"fieldDistribution":{"actor":2187,"date":2187,"id":2187,"text":2187,"ts":2187,"url":2187}},"actor_drift_scores":{"numberOfDocuments":288,"indexSize":1855488,"usedIndexSize":733184,"rawDocumentDbSize":135168,"avgDocumentSize":461,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"actor":288,"chunks":288,"day":288,"drift_raw":288,"early_example":288,"id":288,"late_example":288,"method":288,"p":288,"recorded_at":288,"significant":288,"span":288,"z":288}},"adversaries":{"numberOfDocuments":403,"indexSize":16605184,"usedIndexSize":8228864,"rawDocumentDbSize":790528,"avgDocumentSize":1953,"isIndexing":false,"numberOfEmbeddings":403,"numberOfEmbeddedDocuments":403,"fieldDistribution":{"aliases":21,"attribution_confidence":376,"country":381,"cve_enriched_at":3,"cves_comentioned":30,"cves_comentioned_is_noisy":30,"cves_exploited":33,"cves_exploited_source":2,"cves_exploited_verified":2,"description":400,"discovered_by":12,"discovery_comparator":2,"discovery_date":9,"first_seen":22,"first_seen_basis":30,"first_seen_is_ingest_time":30,"first_seen_source":30,"followers":3,"freshened_at":30,"goals":6,"id":403,"incident_type":380,"indexed_at":375,"infrastructure":8,"ioc_count":30,"ioc_count_is_floor":30,"kev_cves":3,"kev_listed":3,"last_activity":4,"last_seen":37,"malware_families":40,"motivation":14,"name":400,"notes":2,"origin":4,"our_coverage_count":30,"our_coverage_count_is_floor":30,"our_first_observation":30,"our_first_post":30,"our_first_post_date":30,"our_latest_post":30,"platform":7,"primary_motivation":19,"prior_art":1,"profile_source":11,"references":377,"related_uuids":361,"reported_date":5,"reported_to":5,"repos":3,"resource_level":20,"sanctioned_entities":1,"sophistication":21,"source":40,"status":9,"stix_id":6,"suspected_sponsor":2,"suspected_state_sponsor":379,"synonyms":376,"synonyms_joined":380,"tags":16,"target_countries":377,"target_sectors":377,"targets":1,"team":1,"threat_actor_types":19,"timestamp":6,"tracked_by":11,"ttps":17,"type":11,"url":5,"victims_confirmed":14}},"aipm_audits":{"numberOfDocuments":1570,"indexSize":318668800,"usedIndexSize":112672768,"rawDocumentDbSize":39170048,"avgDocumentSize":24941,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"accuracy_measured":121,"aipm_nps":1570,"api_key":1567,"brand_threat_count":1570,"brand_threats":1570,"caller_key_hash":3,"caller_tier":3,"caller_type":3,"category":1570,"combined_score":1570,"contamination":765,"dimensions":1570,"domain":1570,"duration_ms":1570,"ground_truth":120,"grounding_detail":50,"grounding_measured":50,"id":1570,"model_responses":1570,"model_scores":1570,"models_answered":4,"models_queried":1570,"models_served":4,"models_total":4,"models_unavailable":4,"overall_score":1570,"perception_split":4,"scored_dimensions":121,"structure":1570,"timestamp":1570,"version":1570}},"behavioral_sessions":{"numberOfDocuments":12105,"indexSize":66883584,"usedIndexSize":31805440,"rawDocumentDbSize":6295552,"avgDocumentSize":512,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"daysSinceLastSeen":12105,"firstSeen":12105,"id":12105,"infraScore":12105,"ip":12105,"isHeadAsshole":12105,"isSuspicious":12105,"lastSeen":12105,"paths":12105,"rawSessionScore":12097,"rawTotalScore":12097,"reasons":12105,"requestCount":12105,"scoringModifier":12097,"sessionScore":12105,"suppressedScore":12097,"totalPathScore":12105,"totalScore":12105,"whitelisted":12105}},"bishop_accountability":{"numberOfDocuments":1549,"indexSize":10014720,"usedIndexSize":4849664,"rawDocumentDbSize":987136,"avgDocumentSize":629,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"antipattern_score":1546,"burial_site":1,"capacity_1947":1,"category":1549,"chapter":10,"content_preview":16,"country":471,"county":1,"cross_border":92,"dates":1,"death_date":35,"death_rate_1943":1,"death_rate_1944":1,"death_rate_1945":1,"death_rate_1946":1,"deaths":1,"deceased":78,"diocese":1539,"document_type":1445,"excavation_started":1,"filename":1445,"homes_operated":1,"id":1549,"incarcerated":1,"indexed_at":1461,"institution":7,"institutions_mentioned":1461,"laicized":78,"laicized_date":20,"locations":1445,"name":10,"notes":12,"operated_by":1,"persons":1445,"priest_name":94,"rank":9,"ranks_mentioned":1461,"removed_date":59,"report":181,"role":9,"status":78,"title":1461,"town":1,"transfer_signals":1461,"type":1549,"url":1461,"year":1445,"year_discovered":1,"year_range_end":1461,"year_range_start":1461}},"block_events":{"numberOfDocuments":2939868,"indexSize":9192644608,"usedIndexSize":5725372416,"rawDocumentDbSize":1449402368,"avgDocumentSize":485,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"abuseScore":2939868,"action":78013,"asn":1743110,"assholeScore":2939868,"blockReason":2939868,"blockedAt":2939868,"blockedAtTs":2939868,"country":2939868,"id":2939868,"ip":2939868,"isp":2939868,"malwareFamily":2939868,"mitreTechnique":2939868,"path":78013,"rule_id":78013,"source":2939868,"threatfoxIOCs":2939868,"timestamp":2939868,"userAgent":78013,"vtDetections":2939868}},"blocked":{"numberOfDocuments":28709,"indexSize":146644992,"usedIndexSize":43642880,"rawDocumentDbSize":12763136,"avgDocumentSize":436,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"abuseScore":28709,"assholeScore":28709,"blockedAt":28709,"blockedAtTs":28709,"country":28709,"firstCatchBy":28709,"id":28709,"ip":28709,"isHeadAsshole":28709,"isp":28709,"mitreTactic":28709,"mitreTechnique":28709,"noveltyCheckedAt":28709,"noveltyScore":28709,"priorSources":28709,"reverseDNS":28709,"story":28709,"vtDetections":28709,"wasNovel":28709}},"blog":{"numberOfDocuments":3368,"indexSize":282992640,"usedIndexSize":157380608,"rawDocumentDbSize":20160512,"avgDocumentSize":5977,"isIndexing":false,"numberOfEmbeddings":3368,"numberOfEmbeddedDocuments":3368,"fieldDistribution":{"author":3368,"category":3368,"comments":1711,"content":3368,"excerpt":3368,"featured":1711,"hashtags":1711,"id":3368,"likes":1711,"minutesToRead":1711,"pinned":1711,"publishedAt":3368,"slug":3368,"source":3368,"title":3368,"type":3368,"url":3368,"views":3368}},"blog_hits":{"numberOfDocuments":79067,"indexSize":249188352,"usedIndexSize":154882048,"rawDocumentDbSize":41496576,"avgDocumentSize":516,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"id":79067,"ip_hash":79067,"lang":79067,"page":79065,"referrer":79067,"screen":79067,"timestamp":79067,"tz":79067,"ua":79067}},"briefs":{"numberOfDocuments":96,"indexSize":11378688,"usedIndexSize":4481024,"rawDocumentDbSize":630784,"avgDocumentSize":6562,"isIndexing":false,"numberOfEmbeddings":96,"numberOfEmbeddedDocuments":96,"fieldDistribution":{"created_at":96,"date":96,"dateTs":96,"id":96,"markdown":96,"source":96,"summary":96,"title":96}},"butterbot_heartbeat":{"numberOfDocuments":0,"indexSize":45056,"usedIndexSize":8192,"rawDocumentDbSize":0,"avgDocumentSize":0,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{}},"butterbot_memory":{"numberOfDocuments":191162,"indexSize":1322885120,"usedIndexSize":1072058368,"rawDocumentDbSize":707149824,"avgDocumentSize":3691,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"access_count":190489,"confidence":190489,"content":191162,"id":191162,"learned_fact":190489,"query":190489,"response":190489,"sessionId":673,"source":190489,"timestamp":191162,"topic":190489,"type":191162,"userId":673,"user_id":190489}},"butterbot_notifications":{"numberOfDocuments":707,"indexSize":3727360,"usedIndexSize":2220032,"rawDocumentDbSize":233472,"avgDocumentSize":322,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"check_name":707,"checks_run":9,"date":9,"error":9,"failed_checks":9,"id":707,"items":9,"outcome":9,"subject":707,"tier":707,"timestamp":707,"trigger":9}},"c2_watchlist":{"numberOfDocuments":6121,"indexSize":16596992,"usedIndexSize":11624448,"rawDocumentDbSize":1716224,"avgDocumentSize":272,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"aRecords":6121,"certificates":6121,"changed":6121,"changes":6121,"domain":6121,"goneIPs":6121,"group":6121,"httpStatus":6121,"httpTitle":6121,"id":6121,"newCerts":6121,"newIPs":6121,"newPTRs":6121,"ptrRecords":6121,"spfIPs":6121,"timestamp":6121}},"carver_evaluations":{"numberOfDocuments":508,"indexSize":3006464,"usedIndexSize":1429504,"rawDocumentDbSize":364544,"avgDocumentSize":709,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"A":508,"A_note":508,"C":508,"C_note":508,"E":508,"E_note":508,"R":508,"R2":508,"R2_note":508,"R_note":508,"V":508,"V_note":508,"confidence":508,"deep_mode":508,"evidence_summary":508,"id":508,"indexes_with_hits":508,"processing_time_ms":508,"requester_hash":508,"risk_label":508,"target":508,"timestamp":508,"total_documents":508,"total_score":508,"type":508,"vulnerability_signals":508}},"cisa_kev":{"numberOfDocuments":1739,"indexSize":28655616,"usedIndexSize":16789504,"rawDocumentDbSize":1851392,"avgDocumentSize":1056,"isIndexing":false,"numberOfEmbeddings":1739,"numberOfEmbeddedDocuments":1739,"fieldDistribution":{"addedDaysAgo":1739,"cveID":1739,"cwes":1739,"dateAdded":1739,"dateAddedTs":1739,"daysUntilDue":1739,"description":1739,"dueDate":1739,"dueDateTs":1739,"id":1739,"isOverdue":1739,"name":1739,"notes":1739,"product":1739,"ransomwareUse":1739,"requiredAction":1739,"timestamp":1739,"vendor":1739}},"clarity_snapshots":{"numberOfDocuments":28,"indexSize":2048000,"usedIndexSize":1634304,"rawDocumentDbSize":1466368,"avgDocumentSize":52362,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"budget":27,"byDimension":27,"byHost":27,"days":1,"delta":27,"errors":28,"id":28,"kpis":28,"note":1,"projectId":28,"projectName":28,"timestamp":28}},"claude_brain":{"numberOfDocuments":0,"indexSize":49152,"usedIndexSize":12288,"rawDocumentDbSize":0,"avgDocumentSize":0,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{}},"consumer_snapshots":{"numberOfDocuments":12398,"indexSize":14094336,"usedIndexSize":10625024,"rawDocumentDbSize":3227648,"avgDocumentSize":252,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"asn":12398,"country":12398,"error_count":12398,"id":12398,"is_infrastructure":12398,"paths_used":12398,"requests":12398,"segment":12398,"snapshot_date":12398,"timestamp":12398,"used_delta":12398,"used_v2":12398}},"content":{"numberOfDocuments":8403,"indexSize":183508992,"usedIndexSize":91729920,"rawDocumentDbSize":34643968,"avgDocumentSize":4114,"isIndexing":false,"numberOfEmbeddings":8403,"numberOfEmbeddedDocuments":8403,"fieldDistribution":{"author":8403,"category":8403,"content":8403,"excerpt":8403,"id":8403,"publishedAt":8403,"tags":8403,"title":8403,"type":8403,"updatedAt":8403}},"cron_history":{"numberOfDocuments":88046,"indexSize":1044611072,"usedIndexSize":762785792,"rawDocumentDbSize":278720512,"avgDocumentSize":3157,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"error":88046,"host":1,"id":88046,"jobId":88046,"output":88046,"status":88046,"timestamp":88046}},"customer_feedback":{"numberOfDocuments":622,"indexSize":9203712,"usedIndexSize":5705728,"rawDocumentDbSize":548864,"avgDocumentSize":874,"isIndexing":false,"numberOfEmbeddings":622,"numberOfEmbeddedDocuments":622,"fieldDistribution":{"containsQuestion":622,"country":622,"date":622,"id":622,"query":622,"queryLength":622,"response":622,"timestamp":622,"topics":622}},"dlp_findings":{"numberOfDocuments":0,"indexSize":45056,"usedIndexSize":8192,"rawDocumentDbSize":0,"avgDocumentSize":0,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{}},"document_views":{"numberOfDocuments":2277,"indexSize":9125888,"usedIndexSize":5693440,"rawDocumentDbSize":524288,"avgDocumentSize":222,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"action":2277,"dataset":2277,"docType":2277,"eftaId":2277,"id":2277,"index":2277,"ipHash":2277,"searchQuery":2277,"timestamp":2277}},"domain_staging":{"numberOfDocuments":27,"indexSize":188416,"usedIndexSize":147456,"rawDocumentDbSize":12288,"avgDocumentSize":447,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"classification":27,"company":27,"creationDate":27,"domain":27,"id":27,"ip":27,"lastChecked":27,"patternType":27,"registrar":27,"resolves":27}},"domain_watchlist":{"numberOfDocuments":16,"indexSize":315392,"usedIndexSize":81920,"rawDocumentDbSize":4096,"avgDocumentSize":248,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"domain":16,"group":16,"id":16,"lastChange":16,"lastChecked":16,"lastIp":16,"lastIps":16,"note":16,"previousIp":16,"previousIps":16}},"enrichment_cache":{"numberOfDocuments":445,"indexSize":2138112,"usedIndexSize":1294336,"rawDocumentDbSize":491520,"avgDocumentSize":1096,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"cache_key":445,"cached_at":445,"data":445,"expires_at":445,"id":445,"indicator":445,"indicator_type":445,"provider":445,"ttl_seconds":445}},"epstein_files":{"numberOfDocuments":403095,"indexSize":12236492800,"usedIndexSize":6509170688,"rawDocumentDbSize":1776717824,"avgDocumentSize":4399,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"aircraft":39396,"author":2897,"backfill":2329,"bates_begin":2897,"bates_end":2897,"case_category":12021,"case_name":12021,"case_number":12043,"char_count":381146,"content":402991,"content_method":2422,"content_preview":381146,"content_refilled_at":80,"custodian":2897,"dataset":402880,"date_created":2897,"date_sent":2897,"dates":1,"doc_type":277914,"docket_entry":22,"document_extension":2897,"document_title":2897,"document_type":1,"doj_last_modified":3,"doj_url":3,"efta_id":402727,"email_cc":2897,"email_from":2897,"email_subject":2897,"email_to":2897,"evidence_types":39397,"file":31,"file_path":48524,"file_size":162,"file_type":153,"filename":2156,"foia_agency":61,"id":403095,"indexed_at":381106,"indexed_reason":6,"jurisdiction":12021,"key_dates":6,"locations":39397,"md5_hash":2897,"names_mentioned":6,"notes":1,"ocr_at":153,"ocr_method":2147,"ocr_source":153,"original_filename":2897,"pages":39641,"people":39397,"public":3,"sha256":3,"smoking_gun":1,"source":302107,"source_file":31,"source_url":13,"subject":9,"tags":32,"text":2178,"timestamp":16,"title":12207,"type":21870,"version_of":3,"wayback_capture":13,"year":11940}},"epstein_files_superseded":{"numberOfDocuments":1,"indexSize":1183744,"usedIndexSize":1142784,"rawDocumentDbSize":110592,"avgDocumentSize":110584,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"char_count":1,"content":1,"content_preview":1,"dataset":1,"efta_id":1,"id":1,"indexed_at":1,"public":1,"superseded_at":1,"superseded_by":1,"superseded_reason":1}},"epstein_web_traffic":{"numberOfDocuments":113,"indexSize":409600,"usedIndexSize":131072,"rawDocumentDbSize":16384,"avgDocumentSize":136,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"date":113,"human_pageviews":113,"human_searches":113,"source":113,"total_requests":113,"updated_at":113,"updated_at_ts":113}},"feed_hits":{"numberOfDocuments":13574,"indexSize":45965312,"usedIndexSize":32292864,"rawDocumentDbSize":8687616,"avgDocumentSize":632,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"action":13574,"attribution":13574,"consumer_kind":13574,"count":13574,"covered_by_cidr":13574,"direction":13574,"first_party":13574,"id":13574,"indicator":13574,"indicator_hash":13574,"ioc_id":13574,"ioc_match":13574,"ioc_resolved":13574,"reported_at":13574,"reported_at_ts":13574,"reporter_key_id":13574,"source":13574,"threat_type":13574,"zone":13574}},"finops_usage":{"numberOfDocuments":10614,"indexSize":26071040,"usedIndexSize":23433216,"rawDocumentDbSize":6438912,"avgDocumentSize":598,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"cache_read":10614,"cache_write":10614,"cache_write_1h":10614,"cache_write_5m":10614,"feature":10614,"geo":10614,"id":10614,"ingest_ip_asn":10614,"ingest_ip_country":10614,"ingested_at":10614,"input":10614,"model":10614,"output":10614,"parent_session":10614,"request_id":10614,"seat":10614,"session_id":10614,"sig":10614,"speed":10614,"team":10614,"tenant":10614,"tool":10614,"ts":10614}},"fp_suppress":{"numberOfDocuments":82,"indexSize":364544,"usedIndexSize":135168,"rawDocumentDbSize":16384,"avgDocumentSize":191,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"checked_at":82,"checked_at_ts":76,"id":82,"ip":82,"method":82,"reason":6,"suppress":82}},"ga4_traffic":{"numberOfDocuments":13121,"indexSize":42647552,"usedIndexSize":25477120,"rawDocumentDbSize":5107712,"avgDocumentSize":381,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"avgSessionDuration":13121,"bounceRate":13121,"channel":13121,"country":13121,"date":13121,"device":13121,"id":13121,"pagePath":13121,"pageViews":13121,"searchText":13121,"timestamp":13121,"users":13121}},"gap_queue":{"numberOfDocuments":2005,"indexSize":11276288,"usedIndexSize":7118848,"rawDocumentDbSize":675840,"avgDocumentSize":329,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"canonical_query":2005,"cluster_key":2005,"first_seen":2005,"frequency":2005,"id":2005,"indexes":2005,"last_seen":2005,"mined_at":2005,"priority":2005,"sample_queries":2005,"unique_askers":2005}},"hit_counters":{"numberOfDocuments":0,"indexSize":45056,"usedIndexSize":8192,"rawDocumentDbSize":0,"avgDocumentSize":0,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{}},"icij_offshore":{"numberOfDocuments":2016524,"indexSize":4848214016,"usedIndexSize":2805547008,"rawDocumentDbSize":882110464,"avgDocumentSize":429,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"address":690274,"closed_date":117,"company_type":138751,"countries":1273480,"country_codes":1274758,"dorm_date":20207,"former_name":6837,"ibcruc":562583,"id":2016524,"inactivation_date":144773,"incorporation_date":789358,"internal_id":404173,"jurisdiction":807738,"jurisdiction_description":807740,"name":1837544,"node_id":2016524,"note":46087,"original_name":389522,"service_provider":344086,"sourceid":2016523,"status":370657,"struck_off_date":343888,"type":2016524,"valid_until":2015060}},"icij_relationships":{"numberOfDocuments":3339267,"indexSize":3933122560,"usedIndexSize":2239336448,"rawDocumentDbSize":910344192,"avgDocumentSize":264,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"end_date":268867,"id":3339267,"link":3338878,"node_id_end":3339267,"node_id_start":3339267,"rel_type":3339267,"sourceid":2820285,"start_date":946705,"status":174946,"type":3339267}},"iocs":{"numberOfDocuments":1951678,"indexSize":11740860416,"usedIndexSize":9437720576,"rawDocumentDbSize":986550272,"avgDocumentSize":497,"isIndexing":false,"numberOfEmbeddings":1951678,"numberOfEmbeddedDocuments":1951678,"fieldDistribution":{"_index":18,"actor":2633,"affected_package":2,"affected_versions":237858,"ageHours":359,"aliases":18,"all_versions_affected":237857,"asn":25,"auto_discovered":1057,"brandImpersonation":27,"c2Framework":3,"cloudflare_account_count":1,"confidence":1950913,"confidence_original":1,"country":1572884,"created_at":10,"cve_enriched_at":712,"cve_published_at":6646,"cves_exploited":712,"cvss":73,"cwe":67,"days_disclosure_to_poc":6646,"deployment_host":60451,"description":1950245,"discovery_note":1,"ecosystem":237857,"false_positive":882,"firstSeen":716168,"first_seen":1,"fp_checked_at":30,"fp_corrected_at":192,"fp_marked_at":690,"fp_method":1,"fp_reason":882,"fp_suspect":1,"framework":1,"framework_status":1,"gap_term":1057,"harvested_at":6646,"hash_type":20,"honeypot_meta":137856,"id":1951678,"indexed_at":367471,"indexed_by":1693,"indicator":34,"ja3Fingerprint":475624,"kev_cves":712,"kev_listed":722,"labels":106,"last_seen":1,"malware_family":1816424,"malware_family_prior":12,"mitre_technique":148,"name":384821,"osv_id":237793,"parent_count":1,"parent_domains":1,"patched_version":1,"path_signature":1,"post_date":19,"post_title":19,"product":6842,"pulse_id":953833,"pulse_name":953957,"rebuild_signals":1,"references":390555,"registrar":1,"registrar_iana_id":1,"registration_window":1,"related_iocs":1,"repo_created_at":6646,"repo_forks":6646,"repo_pushed_at":6646,"repo_stars":6646,"reporter":141698,"sblNumber":475624,"severity":238581,"source":1950246,"source_url":129513,"spamhausDROP":475624,"spamhausEDROP":475624,"stix_id":71,"subdomain_count":1,"supplyChain":37,"tags":514556,"threat_type":1950130,"timestamp":1950236,"torExitNode":475624,"tor_correlation":1,"txt_records_observed":1,"type":1950246,"valid_from":106,"value":1950212,"vendor":6842}},"iocs_archive":{"numberOfDocuments":0,"indexSize":45056,"usedIndexSize":8192,"rawDocumentDbSize":0,"avgDocumentSize":0,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{}},"ipfs_providers":{"numberOfDocuments":2141,"indexSize":13438976,"usedIndexSize":7020544,"rawDocumentDbSize":1769472,"avgDocumentSize":818,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"asn":2141,"asn_org":2141,"cid":2141,"cid_count":2141,"cid_ts":2141,"confidence":2141,"coordinated":2141,"country":2141,"first_seen":2141,"first_seen_ts":2141,"id":2141,"ip":2141,"ip_version":2141,"last_seen":2141,"last_seen_ts":2141,"multiaddr":2141,"peer_id":2141,"prefix":2141,"relayed":2141,"source":2141,"subnet":2141,"subnet_peers":2141,"times_seen":2141,"transport":2141}},"isp_reputations":{"numberOfDocuments":72,"indexSize":323584,"usedIndexSize":155648,"rawDocumentDbSize":20480,"avgDocumentSize":276,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"abuseRate":72,"abusiveIPCount":72,"asn":72,"cloudProvider":72,"country":72,"exemptFromBlocking":72,"flaggedAsBulletproof":72,"id":72,"ispName":72,"ispNormalized":72,"lastUpdated":72,"reputationScore":72,"suspiciousKeywords":72,"totalIPsSeen":72}},"isp_threat_cards":{"numberOfDocuments":35,"indexSize":315392,"usedIndexSize":98304,"rawDocumentDbSize":12288,"avgDocumentSize":343,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"abuse":16,"avgAbuse":19,"avgVT":19,"count":19,"countries":19,"country":16,"generatedAt":35,"id":35,"ip":16,"isp":16,"ispType":16,"isps":19,"prefix":19,"reports":16,"source":35,"type":35,"types":19}},"llm_usage":{"numberOfDocuments":2301,"indexSize":11743232,"usedIndexSize":6709248,"rawDocumentDbSize":868352,"avgDocumentSize":369,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"caller_type":2301,"cost_usd":2301,"day":2301,"error_class":2301,"feature":2301,"free":2301,"id":2301,"images":2301,"key_hash":2301,"latency_ms":2301,"model":2301,"ok":2301,"provider":2301,"ref":2301,"requested_model":2301,"search_calls":2301,"tier":2301,"tokens_in":2301,"tokens_out":2301,"ts":2301,"ts_ms":2301}},"logs":{"numberOfDocuments":152441,"indexSize":130899968,"usedIndexSize":123006976,"rawDocumentDbSize":47927296,"avgDocumentSize":306,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"asn":42,"asnOrg":7531,"browserType":14543,"city":7531,"country":152373,"email":136805,"endpoint":129274,"id":152441,"ip":152441,"isInteresting":14543,"isOPNsense":136737,"isPANW":14543,"message":8666,"method":8666,"path":23167,"query":42,"region":7531,"statusCode":8624,"tier":136805,"timestamp":152441,"type":152441,"userAgent":152441}},"lookup_leads":{"numberOfDocuments":38,"indexSize":270336,"usedIndexSize":106496,"rawDocumentDbSize":12288,"avgDocumentSize":315,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"email":38,"email_domain":38,"id":38,"indicator":38,"ip":38,"referer":38,"timestamp":38,"type":38,"user_agent":38}},"markov_models":{"numberOfDocuments":21,"indexSize":344064,"usedIndexSize":155648,"rawDocumentDbSize":69632,"avgDocumentSize":3307,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"acc":1,"archive_day":19,"archived_of":19,"confidence":20,"cursor":1,"dataFrom":3,"dataThrough":3,"firstScored":1,"gate":20,"guard":3,"horizons":1,"id":21,"lastScored":1,"matrix":20,"modelId":1,"modelType":20,"observations":20,"regimeChange":3,"served":1,"signals":17,"skill":3,"stateDistribution":20,"states":20,"steadyState":20,"trainedAt":20,"trainedFrom":20,"trainerVersion":20,"trainingDurationMs":20,"transitions":20,"type":1,"updatedAt":1,"version":1}},"mcp_calls":{"numberOfDocuments":219536,"indexSize":614920192,"usedIndexSize":522227712,"rawDocumentDbSize":88051712,"avgDocumentSize":393,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"auth":219536,"caller_country":219536,"caller_ip_hash":219536,"client_name":1085,"cp_ecosystem":90,"cp_malicious":90,"cp_verdict":90,"dredd_dep_graph_scanned":10,"dredd_known_to_us":10,"dredd_severity":10,"dredd_target_server":10,"dredd_verdict":10,"error_message":270,"id":219536,"latency_ms":172738,"mcp_server":68787,"method":219224,"result_count":172738,"status":219536,"tier":219536,"timestamp":219536,"tool_name":219536,"tools_listed":48804,"user_agent":219536}},"mcp_dependencies":{"numberOfDocuments":149522,"indexSize":202797056,"usedIndexSize":189616128,"rawDocumentDbSize":72052736,"avgDocumentSize":473,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"dep_field":149522,"dep_name":149522,"dep_version_constraint":149522,"ecosystem":149522,"fetched_at":149522,"id":149522,"manifest_path":149522,"manifest_type":149522,"repository_url":149522,"server_id":149522,"server_name":149522,"server_version":149522}},"mcp_findings":{"numberOfDocuments":52084,"indexSize":461516800,"usedIndexSize":81940480,"rawDocumentDbSize":17747968,"avgDocumentSize":332,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"auto_discovered":95,"compromise_family":112,"compromise_source":112,"compromise_version":16,"dep_name":112,"dep_version_constraint":16,"description":112,"description_hash_new":51971,"description_hash_old":51971,"detected_at":112,"evidence":51971,"evidence_file":95,"finding_type":52084,"flagged_packages":1,"id":52084,"ioc_id":17,"match_kind":17,"repo":1,"repository_url":109,"run_id":17,"server_id":112,"server_name":52083,"server_version":96,"severity":52083,"snapshot_date":51971,"source":113,"tags":95,"timestamp":51972,"verdict":1,"version_new":51971,"version_old":51971}},"mcp_server_history":{"numberOfDocuments":129635,"indexSize":332197888,"usedIndexSize":332156928,"rawDocumentDbSize":62144512,"avgDocumentSize":471,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"days_seen":129635,"description_changes":129635,"description_hashes":129635,"first_seen":129635,"id":129635,"is_latest_last":129635,"last_seen":129635,"name":129635,"published_at":129635,"remote_changes":129635,"remote_fingerprints":129635,"remote_urls_last":129635,"repository_url":129635,"statuses":129635,"title":129635,"version":129635}},"mcp_servers":{"numberOfDocuments":1345134,"indexSize":4189143040,"usedIndexSize":2577854464,"rawDocumentDbSize":1105248256,"avgDocumentSize":813,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"description":1345134,"description_hash":1345134,"id":1345134,"is_latest":1345134,"name":1345134,"published_at":1345134,"remote_count":1345134,"remote_urls":1345134,"remotes":1345134,"repository_source":1345134,"repository_subfolder":1345134,"repository_url":1345134,"schema":1345134,"snapshot_date":1345134,"status":1345134,"status_changed_at":1345134,"title":1345134,"updated_at":1345134,"version":1345134}},"metric_history":{"numberOfDocuments":136,"indexSize":6492160,"usedIndexSize":4571136,"rawDocumentDbSize":2998272,"avgDocumentSize":22038,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"creed":1,"data":134,"day":135,"dials":1,"generatedAt":1,"id":136,"metric":136,"ok":1,"recorded_at":134,"recorded_at_ts":134,"source":1}},"metric_snapshots":{"numberOfDocuments":13,"indexSize":1769472,"usedIndexSize":663552,"rawDocumentDbSize":135168,"avgDocumentSize":10389,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"creed":1,"data":11,"dials":1,"generatedAt":1,"metric":13,"ok":1,"source":1,"updated_at":11,"updated_at_ts":11}},"nps_responses":{"numberOfDocuments":7,"indexSize":262144,"usedIndexSize":81920,"rawDocumentDbSize":4096,"avgDocumentSize":577,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"comment":7,"country":7,"id":7,"ip_hash":7,"page":7,"score":7,"timestamp":7,"user_agent":7}},"oz_decisions":{"numberOfDocuments":8857410,"indexSize":15376277504,"usedIndexSize":9228558336,"rawDocumentDbSize":3690082304,"avgDocumentSize":408,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"abuseScore":428750,"action":8857404,"actionTools":8428660,"actionsCount":8428660,"bdeConfidence":8428010,"bdeNovelty":8428010,"bdeScore":8857410,"bdeSignificance":8428010,"bdeTier":8857410,"campaignDetected":8428660,"confidence":8428660,"eventC2":8428010,"eventCountry":8856760,"eventISP":8856760,"eventType":8857410,"eventValue":8856463,"id":8857410,"reason":8857404,"safelistMatch":428750,"source":8857410,"timestamp":8857410}},"page_views":{"numberOfDocuments":3314469,"indexSize":5978718208,"usedIndexSize":4696776704,"rawDocumentDbSize":1283551232,"avgDocumentSize":379,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"asn":3314469,"asnOrg":2703812,"city":2703812,"country":3314469,"device":3314469,"id":3314469,"ipHash":3314469,"isBot":3314469,"latitude":2703812,"longitude":2703812,"method":3314469,"metroCode":2703812,"path":3314469,"postalCode":2703812,"referrer":3314469,"region":2703812,"statusCode":3314469,"timestamp":3314469,"timezone":2703812,"userAgent":3314233}},"paranormal":{"numberOfDocuments":3383,"indexSize":35430400,"usedIndexSize":15851520,"rawDocumentDbSize":909312,"avgDocumentSize":260,"isIndexing":false,"numberOfEmbeddings":3383,"numberOfEmbeddedDocuments":3383,"fieldDistribution":{"city":3383,"country":3383,"datetime":3383,"duration":3383,"fact":3383,"id":3383,"landmark":3383,"lat":3383,"lng":3383,"nearBase":3383,"shape":3383,"source":3383,"state":3383,"summary":3383,"type":3383}},"phishing":{"numberOfDocuments":351811,"indexSize":1366183936,"usedIndexSize":515162112,"rawDocumentDbSize":95334400,"avgDocumentSize":262,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"domain":351811,"id":351811,"indexed_at":351811,"phish_id":67663,"source":351811,"submission_time":67663,"target":67663,"type":351811,"url":109717,"verified":67663}},"precursor_history":{"numberOfDocuments":10345,"indexSize":108171264,"usedIndexSize":103165952,"rawDocumentDbSize":67031040,"avgDocumentSize":6471,"isIndexing":false,"numberOfEmbeddings":10345,"numberOfEmbeddedDocuments":10345,"fieldDistribution":{"adversary_reboot_score":10,"block_clustering_score":10345,"c2_publication_surge_score":10345,"consumer_collection_score":10345,"cross_index_correlation_score":10,"cross_tld_campaign_assembly_score":8,"domain_staging_score":8,"elevatedSignals":10345,"github_activation_score":10345,"id":10345,"ioc_velocity_spike_score":10,"mitre_escalation_score":10345,"signals":10345,"source":7226,"threatColor":10345,"threatLevel":10345,"threatScore":10345,"timestamp":10345,"tor_infrastructure_shift_score":8,"type":10345,"version":10}},"pulses":{"numberOfDocuments":16921,"indexSize":218759168,"usedIndexSize":98766848,"rawDocumentDbSize":14110720,"avgDocumentSize":825,"isIndexing":false,"numberOfEmbeddings":16921,"numberOfEmbeddedDocuments":16921,"fieldDistribution":{"created":16921,"description":16921,"id":16921,"indicator_count":16921,"malware_families":16921,"name":16921,"source":16921,"subscribers":16921,"tags":16921,"tlp":16921}},"redaction_candidates":{"numberOfDocuments":0,"indexSize":45056,"usedIndexSize":8192,"rawDocumentDbSize":0,"avgDocumentSize":0,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{}},"report_queue":{"numberOfDocuments":0,"indexSize":28672,"usedIndexSize":8192,"rawDocumentDbSize":0,"avgDocumentSize":0,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{}},"search_queries":{"numberOfDocuments":519327,"indexSize":1023565824,"usedIndexSize":566591488,"rawDocumentDbSize":128679936,"avgDocumentSize":239,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"hitCount":519327,"id":519327,"indexes":519327,"ipHash":519327,"query":519327,"source":519327,"timestamp":519327,"timestampMs":6442,"zeroResults":519327}},"stealthy_outliers":{"numberOfDocuments":1,"indexSize":790528,"usedIndexSize":270336,"rawDocumentDbSize":53248,"avgDocumentSize":53240,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"breakdown":1,"cache":1,"clusters":1,"generatedAt":1,"id":1,"outliers":1,"scannerGroups":1,"success":1,"summary":1}},"the_finders":{"numberOfDocuments":870,"indexSize":18423808,"usedIndexSize":17608704,"rawDocumentDbSize":2342912,"avgDocumentSize":2685,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"agencies":870,"caseNumber":870,"caseNumbers":870,"charCount":870,"dataset":870,"dates":870,"docType":870,"exemptions":870,"foipa":870,"hasRedactions":870,"id":870,"indexedAt":870,"isDeletedPage":870,"keywords":870,"locations":870,"pageNum":870,"part":870,"source":870,"subject":870,"text":870}},"tor_relay_history":{"numberOfDocuments":17178,"indexSize":110034944,"usedIndexSize":44535808,"rawDocumentDbSize":7262208,"avgDocumentSize":414,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"addresses":17178,"asnOrgs":17178,"asns":17178,"countries":17178,"everExit":17178,"everGuard":17178,"fingerprint":17178,"firstSnapshot":17178,"lastSnapshot":17178,"maxBandwidth":17178,"nicknames":17178,"snapshotCount":17178,"updatedAt":17178}},"tor_relays":{"numberOfDocuments":1492855,"indexSize":7245148160,"usedIndexSize":5084602368,"rawDocumentDbSize":2025304064,"avgDocumentSize":1348,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"address":1492855,"asn":1492855,"asnOrg":1492855,"bandwidth":1492855,"consensusHash":1492855,"country":1492855,"countryCode":1492855,"digest":1492855,"dirPort":1492855,"exitPolicy":1492855,"fingerprint":1492855,"firstSeen":1492855,"flags":1492855,"id":1492855,"indexedAt":1492855,"ipv6":1492855,"isExit":1492855,"isGuard":1492855,"isHSDir":1492855,"isRunning":1492855,"isStable":1492855,"isValid":1492855,"isp":1492855,"lastSeen":1492855,"nickname":1492855,"orPort":1492855,"protocols":1492855,"published":1492855,"snapshotDate":1492855,"source":1492855,"version":1492855}},"uap_files":{"numberOfDocuments":379,"indexSize":147480576,"usedIndexSize":59428864,"rawDocumentDbSize":8347648,"avgDocumentSize":22017,"isIndexing":false,"numberOfEmbeddings":379,"numberOfEmbeddedDocuments":379,"fieldDistribution":{"_geo":203,"agency":379,"description":379,"dvids_video_id":379,"has_pdf":379,"has_video":379,"id":379,"incident_date":379,"indexed_at":379,"is_space":379,"location":379,"ocr_pending":379,"ocr_text":379,"pdf_bytes":379,"pdf_filename":379,"pdf_local_path":379,"pdf_pairing":379,"pdf_url":379,"recycled_vault":379,"redaction":379,"release_date":379,"source":379,"thumbnail":379,"title":379,"type":379,"video_title":379,"year":379}},"vendor_blog_seen":{"numberOfDocuments":21312,"indexSize":73437184,"usedIndexSize":51929088,"rawDocumentDbSize":8519680,"avgDocumentSize":391,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"guid":21312,"id":21312,"ingested_at":21312,"ioc_count":21312,"post_link":21312,"post_title":21312,"vendor_slug":21312}},"victim_protection_requests":{"numberOfDocuments":9,"indexSize":229376,"usedIndexSize":61440,"rawDocumentDbSize":12288,"avgDocumentSize":1357,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"attack_vector":9,"attacker":9,"attacker_aliases":4,"attacker_id":5,"breach_date":9,"could_have_been_protected":9,"country":9,"data_destroyed_pb":3,"data_volume_gb":6,"discovery_date":9,"honesty_note":1,"id":9,"indexed_at":9,"organization":9,"our_first_indexed_date":9,"our_first_indicator":9,"our_lead_time_days":9,"records_exposed":9,"sector":9,"source_blog_slug":9,"source_external":5}},"watch_list_snapshots":{"numberOfDocuments":1380,"indexSize":2662400,"usedIndexSize":1404928,"rawDocumentDbSize":397312,"avgDocumentSize":279,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"band":1380,"band_priority":1380,"breach_source":1380,"breached_at":1380,"composite_confidence":1380,"dev_test":1380,"domain":1380,"id":1380,"name":1380,"nps":1380,"phishing_domain":1380,"recorded_at":1380,"signal_types":1380,"snapshot_day":1380,"subs":1380,"vpn_access":1380}},"watchdog_suppressed":{"numberOfDocuments":271,"indexSize":942080,"usedIndexSize":413696,"rawDocumentDbSize":65536,"avgDocumentSize":233,"isIndexing":false,"numberOfEmbeddings":0,"numberOfEmbeddedDocuments":0,"fieldDistribution":{"domain":271,"group":271,"id":271,"newIp":271,"oldIp":271,"reason":271,"timestamp":271,"type":271}},"whitelist_events":{"numberOfDocuments":475113,"indexSize":4681510912,"usedIndexSize":2045755392,"rawDocumentDbSize":146071552,"avgDocumentSize":299,"isIndexing":false,"numberOfEmbeddings":475113,"numberOfEmbeddedDocuments":475113,"fieldDistribution":{"asn":475113,"asnDescription":475113,"country":475113,"id":475113,"ip":475113,"path":475113,"reason":475113,"scoringModifier":475113,"timestamp":475113,"whitelistType":475113}}}}}