diff --git a/docs/api-reference/v4/endpoints/expand-event-field.mdx b/docs/api-reference/v4/endpoints/expand-event-field.mdx
new file mode 100644
index 0000000..b3b88c3
--- /dev/null
+++ b/docs/api-reference/v4/endpoints/expand-event-field.mdx
@@ -0,0 +1,124 @@
+---
+title: "Expand Event Field"
+api: "GET https://api.flare.io/firework/v4/events/_expand"
+authMethod: "bearer"
+---
+
+Returns a page of items for a particular expanded field in a specified event.
+
+
+
+ ```json Stealer Log Credentials
+ {
+ "items": [
+ {
+ "url": "",
+ "username": "",
+ "password": "",
+ "hash": "",
+ "application": ""
+ }
+ ],
+ "next": null
+ }
+ ```
+ ```json Stealer Log Cookies
+ {
+ "items": [
+ {
+ "host_key": "",
+ "path": "",
+ "expires_utc": "2023-11-07T05:31:56Z",
+ "name": "",
+ "value": ""
+ }
+ ],
+ "next": null
+ }
+ ```
+
+
+
+## Parameters
+
+
+ The UID of the Event.
+
+
+
+ The field to expand.
+
+ For a complete list of supported expandable fields per event type, see the [Expandable fields](#expandable-fields) section below.
+
+
+
+ The `next` value from the previous response.
+ If not provided, the first page of results will be returned.
+
+ For more information, see the [Flare standard paging pattern ](/concepts/paging).
+
+
+### Expandable fields
+
+The following fields can be expanded for the given event type.
+
+
+
+ `credentials`
+ `cookies`
+
+
+
+## Response
+The response includes an array of `items` and a `next` field, as described in the [Flare standard paging pattern ](/concepts/paging).
+
+
+
+
+
+
+
+
+ Url of the specific credential.
+
+
+ Username of the specific credential.
+
+
+ Password of the specific credential.
+
+
+ Hash of the specific credential.
+
+
+ Application of the specific credential.
+
+
+
+
+ Host key of the specific cookie.
+
+
+ Path of the specific cookie.
+
+
+ The date the cookie expires.
+
+
+ Name of the specific cookie.
+
+
+ Value of the specific cookie.
+
+
+
+
+
+
+
+
+ The value that should be included in the next request's `from` parameter.
+ Most of the time, this is an opaque string.
+
+ For more information, see the [Flare standard paging pattern ](/concepts/paging).
+