Skip to content

Stolen credential detection

Manage custom stolen credentials that you have added to your organization for monitoring and enforcement.

Operations

Add new stolen credentials

Request

Add stolen credentials sourced from other threat intelligence feeds within your organization.

Security
x-api-key
Bodyapplication/jsonrequired

A list of stolen credentials

Array [
emailstring

Email address of employee.

Example:"john.hill@example.com"
passwordstring

Plain text password. Note that uploading hashes will never match and only plain text passwords can be used.

Example:"myAm@z!ngP4$$w0rdTh4tUcantGu3$$"
metadataobject or null(Metadata)

Metadata provided from the TI provider about where these credentials were found. This will be attached to any Stolen Credentials finding that matched with these credentials

]
POST
/v1/controls/stolenCredentials
curl -i -X POST \
  https://api.pushsecurity.com/v1/controls/stolenCredentials \
  -H 'Content-Type: application/json' \
  -H 'x-api-key: YOUR_API_KEY_HERE' \
  -d '[
    {
      "email": "john.hill@example.com",
      "password": "myAm@z!ngP4$$w0rdTh4tUcantGu3$$",
      "metadata": {
        "key": "value"
      }
    }
  ]'

Responses

OK

Headers
any
Bodyapplication/json
resultArray of objects, [ 1 .. 500 ] items(Stolen Credential)
Response
{
  "result": [
    {
      "email": "john.hill@example.com",
      "password": "myAm@z!ngP4$$w0rdTh4tUcantGu3$$",
      "metadata": {}
    }
  ]
}