IOCParser extracts Indicators of Compromise from reports, feeds, URLs, stdin, and directory trees. It supports refanging, MISP warning-list enrichment, structured renderers, persisted run history, IOC search, run diffs, and queue-backed distributed processing.
☆19Jun 22, 2026Updated 4 months ago
Alternatives and similar repositories for IOCParser
Users that are interested in IOCParser are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Production-grade Abstract Syntax Tree parser for IDS/IPS rules (Suricata/Snort) with comprehensive validation and serialization support.☆15Updated this week
- XProtect Remediator "secret" configurations☆12Nov 17, 2025Updated 11 months ago
- A decompiler for run-only applescripts☆14Feb 21, 2026Updated 8 months ago
- EML analysis tool that parses messages, extracts headers, URLs, and attachments, and recursively analyzes nested EML attachments. Optiona…☆13Jun 11, 2026Updated 4 months ago
- Yara rules written by me, for free use.☆20Nov 26, 2021Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Similarius is a Python library to compare web page and evaluate the level of similarity.☆24Mar 2, 2026Updated 7 months ago
- PowerShell tool to deploy deceptive Active Directory objects, and audit them☆16Jan 7, 2026Updated 9 months ago
- Cmdlets for capturing Windows Events☆14Mar 11, 2022Updated 4 years ago
- Jamf School focused App Deployment / Onboarding tool for macOS, controlled with a Config Profile. Give visual feedback to Admins and End …☆17Aug 1, 2024Updated 2 years ago
- A Rust library along with a Win32 GUI application to determine the driver load order of a Windows system (cf. https://colinfinck.de/posts…☆13Jan 26, 2025Updated last year
- Apuntes en Obsidian del path de INE para preparación de la certificación eJPTv2☆20Mar 24, 2026Updated 7 months ago
- DriverSentinel is a security tool developed in Go that detects malicious and vulnerable drivers on Windows systems by comparing them agai…☆36Jul 28, 2026Updated 3 months ago
- Web-based IOC management platform with threat intelligence enrichment for SOC teams☆22Jun 20, 2026Updated 4 months ago
- Decrypts and extracts tokens from TokenBroker cache files in Windows☆14May 20, 2025Updated last year
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Linking against PrivateFrameworks on macOS.☆22Oct 28, 2021Updated 5 years ago
- A collection of CQL hunting leads for CrowdStrike Falcon and LogScale, mapped to the MITRE ATT&CK framework.☆35Sep 8, 2026Updated last month
- Command-line tool to identify useragents that bypasses proxy restrictions☆14Sep 29, 2026Updated last month
- This tool is a simple ffuf launcher which lets you select dynamically which wordlist and which extentions you want to fuzz.☆10Mar 16, 2026Updated 7 months ago
- Brew Local Privilege Escalation exploit on Intel macOS☆18Mar 6, 2024Updated 2 years ago
- Havoc Professional backend plugin to allow ingesting of events and logs to Ghostwriter☆16Feb 25, 2026Updated 8 months ago
- ☆13Mar 18, 2023Updated 3 years ago
- Threat Simulator for Enterprise Networks☆15May 14, 2022Updated 4 years ago
- x64dbg plugin to log executions☆17Aug 28, 2023Updated 3 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Havoc 3rd party agent. Designed to be evasive. Fully PIC shellcode agent.☆17Dec 29, 2022Updated 3 years ago
- My personal .files☆17Oct 18, 2026Updated last week
- ☆17Apr 21, 2026Updated 6 months ago
- Generate YARA rules from Windows API hashes for malware detection and hunting.☆17Aug 11, 2026Updated 2 months ago
- Slides presented at https://www.meetup.com/m365sandcug/events/302644214☆11Oct 10, 2025Updated last year
- Apple Maps model downloader (fixed)☆14Oct 4, 2022Updated 4 years ago
- ☆82Jan 1, 2026Updated 9 months ago
- browsing through the looking glass☆10Jul 10, 2023Updated 3 years ago
- Defanged malware stages from the telnyx 4.87.1/4.87.2 PyPI supply chain compromise — WAV steganography, credential stealer, Windows persi…☆21Mar 29, 2026Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- AzureLogLibrary - repository used for Azure logging with ARM-templates, scripts, documentation to deploy DCRs, extensions, etc☆14Aug 11, 2023Updated 3 years ago
- A Go library for accessing the CeX trade store products API☆12Jan 8, 2023Updated 3 years ago
- C# API for Nidhogg rootkit☆21Apr 25, 2024Updated 2 years ago
- more at http://www.zer0mem.sk/?p=271☆12Jun 11, 2013Updated 13 years ago
- A demonstration for making USB drivers for 9Front, using the rtl sdr code as an example.☆10Jul 5, 2022Updated 4 years ago
- ☆16Mar 22, 2023Updated 3 years ago
- Cycript backend powered by Frida.☆24Jul 7, 2021Updated 5 years ago