ioc-extractor

Defanged Indicator of Compromise (IOC) Extractor.

An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern threat‑analysis pipelines.

All-in-One Forensic Extraction

A forensic ioc crawler and parser.

This script can get all the Hashes (MD2, MD4, MD5, SHA1, SHA256, SHA384, SHA512) with Certutil.exe command.

Extract every IOC from a threat intel report, deterministically. Paste a link, get indicators provably present in the source, each tied to the exact line that proves it. No LLM in the extraction path.

Tool to extract indicators of compromise from security reports in PDF format

Scan and retrieve IoCs from malware samples for incident response

Aplicación web avanzada para el análisis de Indicadores de Compromiso (IOCs) en tiempo real utilizando la API v3 de VirusTotal.

Blue Team tools for SOC triage and analysis.

Scan and retrieve IoCs from malware samples for incident response

Advanced Threat Intelligence Dashboard: Automated URL/File analysis, IOC extraction, and real-time security monitoring.

Extract IOCs from dionaea honeypot logs

An ETL pipeline for Indicators of Compromise (IOC): from a messy document to ready-to-use reputation lists.

A privacy-first, local AI assistant for SOC analysts and threat hunters. Features a RAG-based chat using the MITRE ATT&CK dataset, automated PDF threat report summarization, and IoC extraction. Powered by local LLMs (Phi-3/LLaMA 3 via Ollama) to ensure no data leaves your device.

Phishing email triage tool for SOC analysts: reads .eml, .msg, IMAP, Microsoft 365 and Gmail; decodes QR codes; enriches URLs; correlates campaigns; exports STIX 2.1, MISP, HTML and JSON