Connect your workflow

API & downloads

The published feeds include vulnerable and malicious driver records and their known samples.

JSON feed

Nested records, hashes, signatures, and sample metadata.

Download published JSON ↗

CSV feed

The existing flattened export for tabular analysis and integrations.

Download published CSV ↗

Fetch the catalog

curl -o drivers.json https://www.loldrivers.io/api/drivers.json

Understand the records

Id is the driver UUID. Category identifies malicious or vulnerable entries. KnownVulnerableSamples contains individual sample metadata for both categories. A single driver can contain multiple samples with different hashes and HVCI evidence.

Verified and LoadsDespiteHVCI can be string values such as "TRUE" and "FALSE". Missing evidence means unknown. Existing names and types remain part of the published feed contract.

This review site reads repository YAML. The feed downloads above point to the existing production exports and may differ from an unmerged branch.

Inspect the driver schema ↗