Darkmon - Compromised Credentials Sweep

Polls Darkmon for compromised credentials, filters to the customer's email/web domains, dedupes via state list, and creates a 'Darkmon Compromised Credential' incident per new account. Triggered on a 4-hour Job.

Pack

Darkmon

Tasks

8

Outputs

• NewAccounts — Compromised account records that triggered new incidents this run.
• Darkmon.Compromised.Account — Raw compromised account data returned by Darkmon.

Commands used

• dmontip-get-compromised