Hudson Rock

Hudson Rock is an integrated data source (Module) in UserSearch. It specialises in infostealer intelligence — records drawn from information-stealing malware logs — and is used to determine whether a machine or identity has been compromised by a credential-stealing infection linked to an IP address, email, or domain.

When you run a search that uses this Module, UserSearch queries Hudson Rock on your behalf and attributes any results back to it in the Data Source column, so the origin of each finding stays clear.

What Hudson Rock is

Hudson Rock is a third-party threat-intelligence source focused on infostealer-compromised devices and credentials. Infostealer malware silently harvests data from an infected computer — saved logins, session cookies, autofill records, and system details — and exfiltrates it into logs that later circulate among threat actors. Hudson Rock aggregates and indexes this material so it can be queried by identifier.

Within UserSearch, Hudson Rock answers the practical question: has this IP, email, or domain shown up in an infostealer log, meaning an associated machine was compromised?

What data it returns

Hudson Rock is oriented toward identifying compromised machines and the identities tied to them. Depending on the identifier you search, results may indicate that a device associated with the input was infected by an infostealer, along with contextual detail about the compromise.

Draft — awaiting confirmation

The precise fields Hudson Rock returns through UserSearch (for example malware family, infection date, exposed credential domains, or affected-machine metadata), its coverage size, and log freshness are not yet vendor-confirmed. Treat specific behavioural claims about this Module as draft until verified. What is confirmed: UserSearch integrates Hudson Rock, and it appears under the search types listed below.

Which search types and Modules use it

Hudson Rock powers these UserSearch search types:

• Threat — including the Computer/IP Threat, Email Threat, and Domain Threat Modules.
• Email — including the AI-Agent Email Threat surface, where Hudson Rock appears among the selectable Modules.

It may also be one of the sources bundled into OneScan on the relevant search types, where OneScan runs several Modules at once and merges the results.

How to access it in UserSearch

1. Open the Threat search type (or Email for the email-threat flow).
2. Enter your identifier — an IP address, email, or domain, matching the Module you intend to use.
3. In the Choose Data Source step, select Hudson Rock (or select OneScan to include it alongside other Modules).
4. Run the search. Any Hudson Rock findings are attributed to it in the Data Source column of your results.

Official site

• Official website: hudsonrock.com

Reliability note

Draft reliability note — awaiting confirmation

Hudson Rock’s collection posture is understood to be a corpus of infostealer logs rather than live or passive scanning, meaning results reflect data captured at the time of a malware infection and its subsequent circulation. Coverage, update cadence, and how recently a given log was ingested are not yet confirmed for this integration. Corroborate any compromise indicator before acting on it, and treat freshness as unverified until confirmed with the data source.

Verified against UserSearch v2.0.20