WhiteIntel
Search stealer logs, leaks, and breach exposure records for identity and infrastructure entities.

Overview
WhiteIntel provides stealer log, leak, and breach intelligence for exposed identity and infrastructure data, including emails, usernames, computer names, IP addresses, and related identifiers.
Malfors uses WhiteIntel to search leaks by emails, usernames, computer names, and IP addresses, then enrich matching entities in your graph with available exposure records and details.
This helps you see where an identifier appears in exposed data and pivot to related accounts, aliases, hosts, or network infrastructure without treating a single match as standalone proof.
Configure
- Create a WhiteIntel account and generate your API token.
- In Malfors, open Enrichments → WhiteIntel → Add Token.
- Paste your token into the field and save.
- WhiteIntel enrichments are now available.