Threat Intelligence IoC Extractor & Defanger

Extract, deduplicate, and classify IPs, Domains, URLs, Hashes, and CVEs with one-click defanging and STIX 2.1 export.

Ingest unstructured threat intelligence reports, malware analysis notes, or raw logs. Automatically extracts and deduplicates IPv4 addresses, domains, URLs, MD5/SHA-256 hashes, CVEs, and email addresses. Features one-click defanging (`hxxps://`, `example[.]com`) and STIX 2.1 JSON bundle export.

Features

  • Automated IoC extraction from unstructured text
  • One-click Defang / Refang toggle for safe sharing
  • Categorized breakdown (IPs, Domains, Hashes, CVEs)
  • STIX 2.1 JSON intelligence bundle export

More AI tools