ThreatHarvester

Harvest/Extract Indicators of Compromise from blogs including images

ThreatHarvester is an essential tool for security analysts, threat researchers, and incident responders. It supercharges your intelligence gathering by instantly harvesting Indicators of Compromise (IOCs) from any website, including technical blogs, news articles, and complex security dashboards. Our powerful scanning engine goes beyond simple text extraction. It intelligently navigates the complexities of modern web pages to ensure nothing is missed. Key Features: * Comprehensive IOC Extraction: Finds IPv4/IPv6 addresses, domains, URLs, MD5/SHA1/SHA256 hashes, and email addresses. * Deep Scan Engine: Accurately extracts data from complex, dynamic web applications by traversing iframes and Shadow DOMs. * Image Scanning (OCR): Automatically extracts IOCs from images, screenshots, and embedded graphics using built-in Optical Character Recognition. * Granular Control: Fine-tune your scans with toggles for deep scanning, iframes, and element attributes to get the exact data you need. * Intelligent Noise Reduction: An optional, built-in allow list automatically filters out common, non-malicious domains from analytics services and CDNs for cleaner results. * Flexible Export: Easily copy IOCs to your clipboard or download them as CSV or JSON for seamless integration into your security tools. * Integrated Query Builder: Create custom search queries for SIEMs (like Splunk) using your extracted IOCs, saving valuable investigation time. Stop manually copying and pasting. Start harvesting intelligence with a single click.