Collection Overview

the collection overview displays information about all of flare's dark web and illicit sources the date range filter allows you to choose over which period you want to view the data and charts the filter at the top will apply to all the charts and tables by default this filter will be set to the last 3 months activity the activity section gives you a high level view of the growth of flare’s collection, focusing on our main illicit data gathering efforts; leaked credentials, stealer logs, chat messages and forums the event counts will be based on the time range you have selected at the top of the page the see details buttons expand to give you more information about a data category note the data in these panels is not live but rather periodically updated new events collected this chart shows all the events collected by flare from dark web and illicit sources you can hover your cursor over the line to get more details for a specific date the last data point now shows a projected value based on how far we are into the month its line appears dotted, and the tooltip shows the real value while noting the projected one on the chart stealer logs this chart shows all the stealer logs found by flare to dive deeper into how flare’s stealer log log coverage has grown over time, and learn more about the malware infection families that flare sees stealer logs from, you can click see details chat messages the chat messages section shows the counts of chat message events flare has gathered from telegram and signal to explore the details of our telegram channel and message coverage, you can click see details communities the forums section shows the total count of https //docs flare io/collection overview#5dsgu forums and imageboards flare covers and the number of posts flare has crawled from these communities to dive deeper into our community coverage you can click see details source status the source status section enables you to dive into how many dark web sources flare gatherers data from, and the status of those sources the data will be presented for the time frame you have selected at the top of the page overview the overview tab gives you a high level overview and count of the dark web sources flare gatherers data from new the new tab will show you a table of all the sources flare has started monitoring within the selected time range if you click on the global events count you will be redirected to the global search events feed where you will be able to view all the events we have gathered for that source since we started monitoring it offline the offline tab will show you a table of all the sources that were temporarily unavailable during the selected time range the status tag will inform you whether this source is still offline at the current time or if we have regained coverage the offline date is the date that we lost coverage and the recovered date is the date that we regained coverage once coverage resumes, data collected during the offline period is typically recovered automatically where possible defunct the defunct tab will show you a table of all the sources that we have stopped monitoring over the selected time range we continue to make available all events we collected from a defunct source and if you click on the archived events count you will be redirected to the global search events feed where you will be able to view all the events we have gathered for that source a defunct source refers to a source that flare previously collected data from but is no longer accessible for example, this could include a forum taken down by law enforcement that has not resurfaced after a reasonable period of time this label is applied manually by our team after thorough checks confirm that the source is unlikely to return online source directory the source directory section is where you can dive into the details of each illicit data source flare gathers data from clicking the chevron on the left of the row will open a section in the table with more information about the category or source the event counts in these tables will be based on the time range you have selected at the top of the page view by category the view by category tab allows you to view flare’s collection from a category perspective the source count is the number of https //docs flare io/collection overview#5dsgu sources within that category, and if you click this count you will be able to view all of those sources if you click on the global events count you will be redirected to the global search events feed where you will be able to view all the events we have gathered for that category for the date range you have selected view by source the view by source tab allows you to view and search flare’s collection from a single dark web source perspective you can filter this table by category and by status new we started monitoring this source within the last month active crawling is running as expected degraded crawling is running slower than expected, either because our systems are at capacity or the source has limits it is important to note that when we return to active coverage, data collected during the offline period is typically recovered automatically where possible offline this source is temporarily unavailable and cannot be accessed by flare it is important to note that when we regain coverage, data collected during the offline period is typically recovered automatically where possible defunct this source no longer exists, but flare retains an archive of events collected from this source crawling frequency clicking the chevron on the left of the row will open a section in the table with more information about the source the crawling frequency defines how often we intend to crawl a given source this frequency varies from source to source and depends primarily on two factors 1\ how frequently new content is added, and 2\ how valuable or relevant we believe the source is if we do not crawl a source as often as its designated crawling frequency requires, the source will be marked as degraded it will remain in this status until we resume crawling it at the expected frequency these source specific sections may also include detailed information about how that particular source is crawled for example, they may explain if our coverage of the source is limited to certain sections or subsets of its content