Haveibeenpwned Checker

Searching for haveibeenpwned information using email **hibp command must not use at starting of the search** hibp command search email ids in haveibeenpwned.com. example1: | makeresults | eval email="xxx@email.com" | hibp field=email example2: | inputlookup email_suspicious | table mail | hibp field=mail Options: - "field" : searching value field (email) Output fields: Pwned_details ( contains Breach Title, Breach Date, DataClasses) Breach Title:MoDaCo,BreachDate:2016-01-01,DataClassess:['Email addresses', 'IP addresses', 'Passwords', 'Usernames']