The telemetry analyzed for the Global Threat Report is Elastic's private data as well as public and volunteer sets. All data has been responsibly sanitized to protect the identities of everyone involved.