Jager
Jager is a tool for pulling useful IOCs (indicators of compromise) out of various input sources (PDFs for now, plain text really soon, webpages eventually) and putting them into an easy to manipulate JSON format. Short Comings: - Doesn't do OCR, so CrowdStrike's 'Images only' PDFs don't work well. - Text analysis feature is planned for OCR by hand. - Regex's need improvement for better performance. - Some manual work needed for group names or attribution. Use: To analyze a PDF: python jager.py -i foo.pdf -o bar.json To analyze a directory of PDFs: python jager.py -d ~/foo -o ~/bar Features for the Future: - New Analysis Modes - Webpages - Plain Text - New Indicator Types: URLs, File Paths, Registry Keys - More Useful Output
FEATURES
EXPLORE BY TAGS
SIMILAR TOOLS
Acapulco is a Splunk application that automatically generates meta-events from hpfeeds channels and visualizes them using D3.js.
A database of Tor exit nodes with their corresponding IP addresses and timestamps.
Bearded Avenger is a cybersecurity tool with various integrations and deployment instructions available.
Check the reputation of an IP address to identify potential threats.
A free threat intelligence feed and banlist feed of known malicious IP addresses for public use only.
A comprehensive and unrestricted dataset of security incidents for research and decision-making
Intelligence feeds for cybersecurity professionals to stay informed about emerging threats and trends.
Facilitates distribution of Threat Intelligence artifacts to defensive systems.
PINNED
Mandos
Fractional CISO service that helps B2B companies implement security leadership to win enterprise deals, achieve compliance, and develop strategic security programs.
Checkmarx SCA
A software composition analysis tool that identifies vulnerabilities, malicious code, and license risks in open source dependencies throughout the software development lifecycle.
Orca Security
A cloud-native application protection platform that provides agentless security monitoring, vulnerability management, and compliance capabilities across multi-cloud environments.
DryRun
A GitHub application that performs automated security code reviews by analyzing contextual security aspects of code changes during pull requests.