Skills
.Work. You
Rest

ioc-development

Community

Extract & operationalize IOCs and IOAs for incident response and intel sharing.

Software Engineering#incident response#threat intelligence#forensics#IOC extraction#IOA analysis
Authorjassics
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps users extract and operationalize indicators (IOCs) and behaviors (IOAs) from incidents or samples, preparing them for detection, blocking, and intel sharing.

Core Features & Use Cases

  • IOC Extraction: Extract atomic, computed, and behavioral indicators from incident findings or samples.
  • Validation: Filter out benign indicators to avoid false positives.
  • Prioritization: Emphasize behavioral indicators for durable defense.
  • Operationalization: Prepare indicators for detection, blocking, and intel sharing, with support for STIX-friendly output.
  • Use Case: After an investigation, use this Skill to turn findings into defensive value by generating a structured indicator set.

Quick Start

Extract indicators from the sample 'malware-analysis-report.txt' and prepare them for intel sharing.

Dependency Matrix

Required Modules

None required

Components

scriptsreferences

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: ioc-development
Download link: https://github.com/jassics/awesome-claude-security/archive/main.zip#ioc-development

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.