Credentials

The Credentials tab of the Dashboard lists the leaked credential records for the selected domain or watchlist group. It merges consumer and corporate records into one feed and lets you filter, sort, and drill into any record.

Availability: All plans. CSV export of raw records requires an organization account on an Enterprise or Threat Intelligence subscription.

Reading the table

Each row represents one leaked record and shows the leaked account, the application or URL it was captured on, the record class, the source type, and when it was last seen. In group views, a source column indicates which member domain the record belongs to. The header reflects the active record class, for example "Consumer Credential Records for example.com".

Filtering and sorting

The filter bar provides:

• Records — All, Consumer, or Corporate. This is a client-side filter applied to the loaded feed.

• Log type — All, Stealer, Combolist, or Database, sent to the backend.

• Show latest added — one-click predefined views that narrow to a record class and sort by date added.

• Sort by — Log date or Latest added.

A Reset control clears the active filters.

Record detail

Selecting a record opens the shared detail sidebar, which presents the device metadata and the exposed credentials. See Viewing logs and record detail.

Exporting

The Export button opens a slide-over that exports the full record set server-side as a CSV file. The export is billed against your organization's export credits and requires an Enterprise or Threat Intelligence subscription. You choose the record type, a date range, and optional infected-system columns. See CSV exports and export credits.