This is the data I observed.
If you want other data, please DM me (@nao_sec)

• rig.params.json
  URL parameters of Rig Exploit Kit

• rig.ip.json
  IP address of Rig Exploit Kit

• seamless.json
  SHA256 hash of malware used in Seamless (Rig Exploit Kit)

• tss.json
  TSS Data (url, domain, ip, campaign)

• rig.ip.json
  IP address of Rig Exploit Kit

• rulan.json
  SHA256 hash of malware used in Rulan (Rig Exploit Kit)

• seamless.json
  SHA256 hash of malware used in Seamless (Rig Exploit Kit)

• tss.json
  TSS Data (url, domain, ip, campaign)

• rig.ip.json
  IP address of Rig Exploit Kit

• rulan.json
  SHA256 hash of malware used in Rulan (Rig Exploit Kit)

• seamless.json
  SHA256 hash of malware used in Seamless (Rig Exploit Kit)

• tss.json
  TSS data (url, domain, ip, campaign)