@GossiTheDog @interpipes but gossi, that still doesn’t explain how you have access to that data? Are you buying it? Do you know people who have access to it? Who runs the queries to validate against IOCs to make such a statement? How can other small orgs do the same?