Overview
Harvest/Extract Indicators of Compromise from blogs including images
ThreatHarvester is an essential tool for security analysts, threat researchers, and incident responders. It supercharges your intelligence gathering by instantly harvesting Indicators of Compromise (IOCs) from any website, including technical blogs, news articles, and complex security dashboards. Our powerful scanning engine goes beyond simple text extraction. It intelligently navigates the complexities of modern web pages to ensure nothing is missed. Key Features: * Comprehensive IOC Extraction: Finds IPv4/IPv6 addresses, domains, URLs, MD5/SHA1/SHA256 hashes, and email addresses. * Deep Scan Engine: Accurately extracts data from complex, dynamic web applications by traversing iframes and Shadow DOMs. * Image Scanning (OCR): Automatically extracts IOCs from images, screenshots, and embedded graphics using built-in Optical Character Recognition. * Granular Control: Fine-tune your scans with toggles for deep scanning, iframes, and element attributes to get the exact data you need. * Intelligent Noise Reduction: An optional, built-in allow list automatically filters out common, non-malicious domains from analytics services and CDNs for cleaner results. * Flexible Export: Easily copy IOCs to your clipboard or download them as CSV or JSON for seamless integration into your security tools. * Integrated Query Builder: Create custom search queries for SIEMs (like Splunk) using your extracted IOCs, saving valuable investigation time. Stop manually copying and pasting. Start harvesting intelligence with a single click.
Details
- Version0.0.0.3
- UpdatedMay 6, 2026
- Offered byclearsignalintel
- Size8.04MiB
- LanguagesEnglish (United States)
- Developer
Email
Clearsignalintel@gmail.com - Non-traderThis developer has not identified itself as a trader. For consumers in the European Union, please note that consumer rights do not apply to contracts between you and this developer.
Privacy
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
