indicators-of-compromise threat-intelligence threat-hunting threat-sharing grammar-parser threatintel cidr-range ipv4 iocs ioc-finder observable network-data cidr-ranges parse-urls grammars malware-research malware-analysis hacktoberfest

IOC Finder

Parse indicators of compromise (also known as "observables" or "network data" - e.g. urls, email addresses, etc) from text.

📖 Documentation (it's interactive!)

💪 I'm looking for sponsorship for this project. I have a number of improvements and helpful features I'd like to add and would appreciate some support as I invest this time and focus. If you use this project for in a commercial capacity and/or find it useful, please consider contributing even a small amount. Thanks!

About

Simple, effective, and modular package for parsing observables (indicators of compromise (IOCs), network data, and other, security related information) from text. It uses grammars rather than regexes which makes it more readable, maintainable, and hackable. Explore our interactive documentation here: https://hightower.space/ioc-finder/

indicators-of-compromise threat-intelligence threat-hunting threat-sharing grammar-parser threatintel cidr-range ipv4 iocs ioc-finder observable network-data cidr-ranges parse-urls grammars malware-research malware-analysis hacktoberfest

GNU Lesser General Public License v3.0

Languages

Language:Python 98.3%Language:Makefile 1.4%Language:Shell 0.3%Language:Dockerfile 0.1%