ioc

IOC extraction, enrichment, and threat intelligence correlation

SKILL.md

GitHub

IOC Intelligence

Extract and enrich indicators:

  • Extract IOCs from any source (reports, logs, samples)
  • Normalize and validate indicators
  • Enrich with threat intel (VT, AbuseIPDB, WHOIS)
  • Correlate infrastructure
  • Export in multiple formats

IOC Types

IPv4/IPv6, domains, URLs, hashes (MD5/SHA1/SHA256), emails, registry keys, file paths, mutexes

Required Context

  1. Source: File path, text, or paste content
  2. IOC Types: All or specific types
  3. Enrichment: Basic (WHOIS) or full (VT, Shodan)
  4. Output: JSON, CSV, STIX, MISP

Example

/ioc
Source: threat_report.pdf
Enrichment: Full
Output: JSON

Related in security

git-workflow

Git workflow guidance for commits, branches, and pull requests

by agno-agi
37,144

clerk-observability

Implement monitoring, logging, and observability for Clerk authentication. Use when setting up monitoring, debugging aut...

by jeremylongshore
1,061

juicebox-migration-deep-dive

Advanced Juicebox data migration strategies. Use when migrating from other recruiting platforms, performing bulk data im...

by jeremylongshore
1,061