Actions85
- Assessment Actions
- Assessment Data File Actions
- Assessment Data File (Invited) Actions
- Assessment Event Actions
- Assessment Invite Actions
- Assessment Preference Actions
- Assessment Template Actions
- Chatter Actions
- End User Actions
- End User Watchlist Actions
- First Party Alert Actions
- First Party Watchlist Actions
- Leak File Search Actions
- Research Actions
- Third Party Alert Actions
- Third Party Watchlist Actions
Leak File Search → Search
AI-generatedSummary
Searches HackNotice leak files by filename term, word pool, or filters alone, then returns matching results from the selected page.
Inputs
- Search Mode — Choose Term (default), Word Pool, or Filters Only. Filters Only sends just the date and additional filters.
- Term (required) — In Term mode, provide a non-empty phrase and choose a search type: Exact Phrase, Wildcard Both, Wildcard Prefix, or Wildcard Suffix.
- Word Pool (required) — In Word Pool mode, provide a JSON array with at least one non-empty search term. Minimum Matches sets how many terms must match (default 1); optional Word Pool Search Types provides per-term search types as a JSON array.
- Limit by Time — Optionally filter by a custom start and end date, or by the last day, week, or month. Custom Date Range requires both dates; None leaves date fields in Additional Filters unchanged.
- Additional Filters — Optional JSON object of filters, including fields such as domain, tags, severity, size or line-count bounds, and process dates. These are combined with the selected search mode and time range.
- Page Number — Zero-based result page, from 0 to 199; defaults to 0.
- Order — Sort ascending or descending; defaults to descending.
- Sort Field — Sort by line count, process timestamp, size, or timestamp; defaults to timestamp.
- Search After — Optional numeric Elasticsearch search_after value for deep pagination. Values greater than 0 are sent to the API.
Output shape
A list of matching leak file items, with each result returned as an n8n item.
Makes an authenticated POST request to the HackNotice leak file search endpoint. An empty match set returns an empty list; search results are limited to one requested page.