Skip to main content

scrapes IOCs from plaintext

Project description

IOC-parser

IOC-Parser is a script that will extract the IOCs from a given (text-based) file and output it in .csv-format. Or - as a module - returns a list of instances with an IOC-value and an IOC-type.

Installation

  • as a module: pip install iocparser
  • as a stand-alone script: git clone https://github.com/renzejongman/iocparser

Usage

./iocparser.py -s [source-file] -o [outputfile.csv]

Use in a custom script

from iocparser import IOCParser
textObj = IOCParser("text")
results = textObj.parse()

Classes

  • .IOC(kind, value)
    Instances of this very simple class are generated by the IOCParser class.
    kind = "IP", "uri", "md5", "sha1", "sha256", "CVE", "email" or "file"
    value = The value of the IOCParser-class and returned as a list.

  • .IOCParser(text) This class takes a text as input, extracts all the IOCs and returns them as a list of instances of the IOC-class.
    text = the raw text (as a variable) to be parsed.

Other files

  • extensions: the file extensions needed to detect a filename (and not mistake them for URIs)
  • tlds: the Top Level Domains (TLDs) needed to recognise URI`s (and not mistake them for files)
    feel free to manipulate those files, but make sure there are no empty lines in either of them, or the script will break.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

iocparser-1.0.14.tar.gz (4.9 kB view details)

Uploaded Source

Built Distribution

iocparser-1.0.14-py3-none-any.whl (5.3 kB view details)

Uploaded Python 3

File details

Details for the file iocparser-1.0.14.tar.gz.

File metadata

  • Download URL: iocparser-1.0.14.tar.gz
  • Upload date:
  • Size: 4.9 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? No

File hashes

Hashes for iocparser-1.0.14.tar.gz
Algorithm Hash digest
SHA256 b593df3555acec091de89a9a4c344c48316aa0618daaab7eef65de70f90a77b5
MD5 4baf40c62d13b052bcb18353b87ca437
BLAKE2b-256 372614dd6b4141ee9fa49384ddad304c71356ba02a281b03e9ef006194b88a56

See more details on using hashes here.

File details

Details for the file iocparser-1.0.14-py3-none-any.whl.

File metadata

File hashes

Hashes for iocparser-1.0.14-py3-none-any.whl
Algorithm Hash digest
SHA256 e49b030c42a5a9b7dea25faefef8e0846fd08a633c1d4907fca58198c7df8ce6
MD5 a385e1f4276a9675b2253d4714c1ff07
BLAKE2b-256 9c68ec962fc2a36038e5902e3cb9b5a8024cea55f46f36b59e6b3977a545a480

See more details on using hashes here.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page