Skip to content

xreference/ioc-parser

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

23 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

ioc-parser

IOC Parser is a tool to extract indicators of compromise from security reports in PDF format. A good collection of APT related reports with many IOCs can be found here: APTNotes.

Usage

ioc-parser.py [-h] [-p INI] [-f FORMAT] [-d] PDF

  • PDF File/directory path to PDF report(s)
  • -p INI Pattern file
  • -f FORMAT Output format (csv/json/yara)
  • -d Deduplicate matches

Requirements

PyPDF2 - pip install pypdf2

About

Tool to extract indicators of compromise from security reports in PDF format

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 100.0%