A library and command line tool for extracting indicators of compromise (IOCs) from security reports in PDF, HTML, Word, or text format
☆56Jul 22, 2026Updated last month
Alternatives and similar repositories for iocsearcher
Users that are interested in iocsearcher are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Globally distributed honeypots and HoneyNets IOCs and file reversing☆16Apr 22, 2024Updated 2 years ago
- Converts Sigma detection rules to a Splunk alert configuration.☆12Jul 1, 2021Updated 5 years ago
- Summarize CTI reports with OpenAI☆18Aug 17, 2026Updated last week
- Application whitelist--verify exectuabl/so ELF and script and interp program signature in kernel when will running☆12Jan 15, 2024Updated 2 years ago
- MEGR-APT: A Memory-Efficient APT Hunting System Based on Attack Representation Learning☆65Aug 26, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A network intrusion detection system using machine learning. Naive Bayes, Decision Tree machine learning algorithm are used in this proje…☆15Dec 12, 2016Updated 9 years ago
- Generator of regular expressions☆15Apr 11, 2025Updated last year
- Windows memory scanner for call stack spoofing detection, unbacked shellcode, injected DLLs and in-memory C2 implants.☆40May 22, 2026Updated 3 months ago
- A simple CDR software for disarming malicious contents contained in documents.☆10Nov 7, 2022Updated 3 years ago
- Indicators of Compromise for malware documented in whitepapers.☆46Aug 19, 2026Updated last week
- AVClass malware labeling tool☆486Oct 22, 2024Updated last year
- Yara rules☆22Mar 27, 2023Updated 3 years ago
- A YARA rule generator☆84Feb 8, 2026Updated 6 months ago
- Official, curated detection content (Sigma, YARA, IOC packs) for the Rustinel endpoint detection engine.☆24Updated this week
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A compiler for the Meta Attack Language☆16Apr 11, 2022Updated 4 years ago
- ☆63Updated this week
- Utilities for working with vivisect☆26Oct 1, 2025Updated 10 months ago
- Grab unsaved Notepad contents with a Beacon Object File☆11Jun 19, 2022Updated 4 years ago
- Python EDR system Example (server and client-side)☆19Jan 13, 2021Updated 5 years ago
- A "hooray I am useful" Cobalt Strike Team Server scanner☆20Oct 22, 2021Updated 4 years ago
- Threat Feeds, Threat lists, and regular lists of known IP ranges and domains. It updates every 4 hours.☆16May 21, 2021Updated 5 years ago
- MultiAV scanner with Python and JSON REST API using Malice Docker AV Containers and Docker-Machine based Autoscaling☆80Aug 1, 2024Updated 2 years ago
- Source code of paper "EPScan: Automated Detection of Excessive RBAC Permissions in Kubernetes Applications"☆16May 14, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A labeled dataset used for the knowledge graph construction.☆35Nov 30, 2023Updated 2 years ago
- ☆31Feb 28, 2025Updated last year
- Hunt for Keywords , Mutex, Windows Event,Registry Keys,Process,Schedule tasks in Windows Machine☆22Dec 8, 2024Updated last year
- Maco - Malware config extractor framework☆54Aug 19, 2026Updated last week
- Repository of Yara rules created by the Stratosphere team☆29Jul 8, 2021Updated 5 years ago
- 布谷鸟异构图构建，对比学习☆11Jun 1, 2022Updated 4 years ago
- Command-line tool to identify useragents that bypasses proxy restrictions☆13Oct 23, 2025Updated 10 months ago
- A Novel and Modular Solution for Extracting All STIX Objects in CTI Reports☆34Aug 21, 2023Updated 3 years ago
- Original implementation and resources of DeepCASE as in the S&P '22 paper☆106Aug 1, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A collection of files with indicators supporting social media posts from Palo Alto Network's Unit 42 team to disseminate timely threat in…☆590Updated this week
- Generate list of potential typo squatting domains with domain name permutation engine to feed AIL and other systems.☆108Apr 30, 2025Updated last year
- Malware detonation platform Polygon integration☆10Aug 1, 2023Updated 3 years ago
- ☆21Updated this week
- Packet Sniffing in the Cloud☆35Feb 22, 2026Updated 6 months ago
- Reduce false-positive alarms via voxel based point cloud analysis.☆23May 6, 2024Updated 2 years ago
- VSCode extension for the YARA pattern matching language☆62Jan 10, 2024Updated 2 years ago