pedram@smash:~/code$ cat iocextract

# iocextract

Defanged Indicator of Compromise (IOC) extractor.

lang Pythonsince 2018stars 584forks 93

A library and CLI that pulls URLs, IP addresses, MD5/SHA hashes, email addresses, and YARA rules out of text, including the encoded and defanged forms analysts actually write, and optionally decodes or refangs them on the way out.

pedram@smash:~$