IOCExtract is an advanced Indicator of Compromise (IOC) extractor. This library extracts URLs, IP addresses, MD5/SHA hashes, email addresses, and YARA rules from text corpora. It includes some encoded and “defanged” IOCs in the output, and optionally decodes/refangs them. The Problem It is common practice for malware analysts or endpoint software to “defang” IOCs such …
Continue reading “IOCExtract : Advanced Indicator Of Compromise (IOC) Extractor”