Extract IPs, domains, URLs, emails, and file hashes from text, logs, or URLs.
npx skills add https://github.com/woohyun212/security-skill --skill ioc-extract
Please help me install this Agent Skill. Skill: ioc-extract Source: https://github.com/woohyun212/security-skill/tree/main/ioc-extract Command: npx skills add https://github.com/woohyun212/security-skill --skill ioc-extract
Security analysts need a fast way to pull Indicators of Compromise from raw data without manually sifting through logs or reports.
Ask the ioc-extract skill to parse your log file and return a defanged IOC list.
High-intent search queries and answers about installing and using this skill.
To extract indicators of compromise from raw text logs, you can use automated IOC extraction tools to identify IP addresses, domains, URLs, emails, and file hashes. This replaces manually sifting through logs by parsing the input source directly.
Defanging in threat intelligence is the process of obfuscating extracted indicators of compromise to prevent accidental interaction. It generates a safe, shareable list where malicious IPs or URLs are modified so they cannot be clicked or executed inadvertently.
Yes, you can parse URLs and local file paths to find IP addresses and hash values. The extraction process works with flexible inputs, allowing you to analyze direct text, local files, or remote URLs to identify security indicators.
You do not strictly need the ioc-finder package to extract IOCs from incident response reports. The extraction process can operate with or without this optional library, though having it may enhance the parsing capabilities for your security monitoring workflows.
Automated IOC extraction requires Python 3.6 or higher to run. You need this environment setup to successfully parse logs, text, or URLs and generate defanged output for your threat intelligence analysis.
zrongAnalyze video content via frames or streams using vision-language models.
pauljbernardCoordinate cyber threat analysis, intelligence collection, and incident response.
backbay-labsAutomate security event investigation and threat hunting workflows.
GhostPWNExtract and normalize indicators of compromise from threat reports.
