malicialab/iocsearcher

An npm package for extracting common IoC (Indicator of Compromise) from a block of text

A simple application that extracts your IoCs from garbage input and checks their reputation using multiple CTI services.

Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes which makes it more readable, maintainable, and hackable. Explore our interactive documentation here: https://hightower.space/ioc-finder/

Extracting IoC data from eMail

🐸 Identify anything. pyWhat easily lets you identify emails, IP addresses, and more. Feed it a .pcap file or some text and it'll tell you what it is! 🧙‍♀️

Extracts IoCs, TTPs and the relationships between them. Outputs a STIX 2.1 bundle.

Python CLI tool for rapid IOC analysis (IPs, Domains, CVEs) using 6 free Threat Intel APIs. Outputs: Color-coded Excel, JSON, CSV. Uses: VT, Shodan, AbuseIPDB.

Fang and defang indicators of compromise. You can test this project in a GUI here: http://ioc-fanger.hightower.space .

An extensible, deterministic static‑analysis engine that extracts high‑signal IOCs from PE binaries and text, built for SOC automation and modern threat‑analysis pipelines.