ioc-extraction

Tactical Threat Intelligence & OSINT Extractor a high-performance, stealthy OSINT tool designed to scrape, extract, and analyze Indicators of Compromise (IOCs) strictly from X.com (Twitter). It leverages headless browser automation to monitor threat actors, security researchers, and malware campaigns in real-time.

Huntable CTI Studio is an AI-assisted cyber threat intelligence workbench that turns open-source CTI into Sigma rules.

Open-source Python CTI pipeline that collects and enriches IoCs from five feeds, generates a Plotly dashboard and CSV export, and forecasts seven-day threat trends for SOC analysts.

An automated cybersecurity threat intelligence analysis pipeline that extracts indicators of compromise (IOCs), maps MITRE ATT&CK techniques, and builds knowledge graphs from unstructured CTI reports using NLP and LLMs. Features cross-platform compatibility and RESTful API for integration.

Automated dark web threat intelligence scraper that monitors onion forums via native Tor SOCKS5, extracts IOCs, deduplicates posts, and classifies breach alerts using an offline local LLM.

An automated triage tool for SOC analysts. Parses raw .eml files, extracts and defangs IOCs, analyzes SPF/DMARC headers, and generates standardized threat reports.

Forensic analysis of a targeted phishing campaign, email header tracing, URL sandboxing, and IOC extraction.

Scored MITRE ATT&CK verdict engine (noisy-OR confidence), ELF/PE capability inference, attribution hashes (imphash/symhash/ssdeep/TLSH), file magic + embedded-file carving, IOC extraction, YARA on file + memory dump, pcap network intel (DNS/SNI/JA3), TOML config, report schema_version. Verified on live traffic; full test + fuzz coverage."

AI-powered phishing email analyzer for SOC analysts — Claude AI, MITRE ATT&CK mapping, IOC extraction

High‑performance iocx plugin for detecting Windows Registry keys, values, and persistence locations. Includes full test coverage, performance benchmarks, and security checks.

AI-assisted SOC/SIEM platform for forensic log analysis, threat detection, IOC extraction, threat intelligence correlation and enterprise incident reporting.

A Python-based static analysis toolkit for detecting malicious indicators in PDF files using metadata analysis, IOC extraction, YARA scanning, CVE detection, and threat intelligence integration.

Reverse-engineering workstation provisioner and automated binary analysis pipeline for Kali/Debian Linux. Installs a full toolchain and runs type-aware static + dynamic analysis (46 stages) on binaries, producing structured JSON, self-contained HTML reports, and explainable verdicts. Ideal for malware triage and RE workflows.

Python-based SOC automation tool for extracting phishing IoCs, querying Threat Intel APIs, and visualizing attack infrastructure in Power BI.

🕵️♂️ Extract IOCs quickly with TotalOSINT, a client-side OSINT tool designed for privacy-first investigations in security analysis.

TotalOSINT is a privacy-first, client-side OSINT toolkit for security analysts. Instantly extract IOCs (IPs, Domains, Hashes) from raw logs and launch bulk investigations across dozens of threat intelligence sources. Zero-data-persistence workflow for SOC and DFIR teams. No installation required.

Free, local phishing email analyzer — parses .eml/.msg, extracts IOCs, checks SPF/DKIM/DMARC, scores risk 0–100, and optionally enriches with VirusTotal, AbuseIPDB, URLScan, WHOIS, and Claude AI threat intelligence. No cloud. Your emails stay on your machine.

Modular Python static malware-analysis sandbox for IOC extraction, YARA scanning, entropy analysis, hashing, risk scoring, reports, and HTML dashboards.

2026 Threat Intel IOC Enrichment & Malware Report Generator for SOC Analysts