Data Formats

Blockade has three primary storage items: Users, Indicators and Events. Indicators and Events are the most interesting and applicable to users as they are the core of the service.

User Format

Indicator Format

All indicators sent into Blockade are hashed and stored within the database

Event Format

For analysts, it’s important to understand as much as possible about a given attack. Blockade events retain the web request context generated by the browser and include some additional properties about the environment. This data allows analysts to potentially surface more intelligence that can then be sent back to Blockade.