Advanced Indicator of Compromise (IOC) extractor.
Last release 3 years ago
no release in 18 months
Ships unpredictably
gaps range from 1 weeks to 3.7 years
Some releases are documented
notes for 10 of 30 stable releases
Nothing withdrawn
no release was ever pulled
8 years old
30 releases · first in 2018
Release timeline
30 releases since 2018One column per quarter.
Releases
- 1.16.122 Sept 2023
Release notes
Open source →Changelog
Bug Fixes
- Includes a fix for IP addresses and URL extraction, removing schema in certain cases when using these methods interchangeably (#77)
New build info and documentation can be found here: https://pypi.org/project/iocextract/1.16.1/
Full Changelog: v1.16.0...v1.16.1
- 1.16.018 Jul 2023
Release notes
Open source →Changelog
Features
- Allow extraction from a server/host containing a file with IOCs for the console application (#74)
- (
--remote_input,-ri): Extract IOCs from a remote data source - (
--url,-url): URL to extract IOCs from
- (
- New source now allowing for the extraction of telephone numbers (43f7921)
New build info and documentation can be found here: https://pypi.org/project/iocextract/1.16.0/
Full Changelog: v1.15.2...v1.16.0
- Allow extraction from a server/host containing a file with IOCs for the console application (#74)
- 1.15.218 Apr 2023
Release notes
Open source →Changelog
Breaking Changes
- The project has been renamed from
python-iocextracttoiocextract. GitHub automatically handles redirects when renaming repositories, but if for some reason you run into any problems, feel free to open an issue.
Bug Fixes
- Fixed minor URL extraction bug when working with the default configuration (no parameters) (#68)
New build info and documentation can be found here: https://pypi.org/project/iocextract/1.15.2/
Full Changelog: v1.15.1...v1.15.2
- The project has been renamed from
- 1.15.115 Mar 2023
Release notes
Open source →Changelog
Bug Fixes
- Refactored unit tests to now pass across most test cases (b3f9442)
Features
- Refactored documentation (including the README.md/rst on GitHub, readthedocs build configuration, etc.) (74948ca)
- Visit the documentation here: https://inquest.readthedocs.io/projects/iocextract/en/latest/
- Now includes a GitHub workflow for an immediate status assessment for Python 3+ builds (74948ca)
- Generic JSON parsing and extracting for base64 encoded strings (#43) (058a66d)
New build info and documentation can be found here: https://pypi.org/project/iocextract/1.15.1/
Full Changelog: v1.14.1...v1.15.1
- 1.15.015 Mar 2023
Nothing published for this version
- 1.14.124 Feb 2023
Release notes
Open source →Changelog
Bug Fixes
- Introduces a fix for extracting non-defanged URLs (#61)
Features
- Allows for recursive directory file (
.txt) extraction via the CLI (#12)
New build info and documentation can be found here: https://pypi.org/project/iocextract/1.14.1/
Full Changelog: v1.14.0...v1.14.1
- 1.14.011 Jan 2023
Release notes
Open source →Changelog
Bug Fixes
- Fixed issue where defanging automatically defaulted to the http/https protocol. Now allows the user to define this functionality (#32, #34)
- Added the ability to extract IP addresses (IPv4) with a 4th octet (i.e. 10.10.10.10.4444) (#31)
- Updated email regex to now extract emails addresses with a first + last name structure (i.e. first[.]last@domain[.]com) (#36)
Features
- Added easier argparse options to allow a simpler version of pre-existing options
- Minor improvements to IPv6 extraction
New build info and documentation can be found here: https://pypi.org/project/iocextract/1.14.0/
- 1.13.86 Jan 2023
Release notes
Open source →Changelog
Bug Fixes
- Fixed stdout redirection on Unix-based platforms when piping IOCs to
less(#37) by @presianbg (#48) - Fixed
httpsrefanging accuracy when dealing with a defangedhxxp/hxxpsschema (#49) by @dsfinn (#50) - Improved regex for backtracking in the backslash regular expression set (#52) by @Synse (#56)
- Added a space delimiter when decoding base64 for URLs to allow improved parsing (#47)
- Improved control over end punctuations to allow modifiable restrictions when extracting URLs (#40)
New build info and documentation can be found here: https://pypi.org/project/iocextract/1.13.8/
- Fixed stdout redirection on Unix-based platforms when piping IOCs to
- 1.13.28 Dec 2022
Release notes
Open source →Changelog
Bug Fixes
- Fixed URL regex expression to remove whitespace and trailing characters when extracting unencoded URLs. (#53)
- Updated license for PyPi. (#51)
New build info and documentation can be found here: https://pypi.org/project/iocextract/1.13.2/
- 1.13.112 Mar 2019
Release notes
Open source →- Fix a bug in base64 handling that caused an exception on some input.
- Add
--extract-emailsflag to the CLI. - Update documentation.
- 1.13.01 Mar 2019
Release notes
Open source →- NEW!: Overhaul YARA extraction, with support for imports, includes, comments, scopes, and more.
- Reduce false positives from URL extraction (#29 from @JayFields).
- 1.12.219 Feb 2019
Nothing published for this version
- 1.12.13 Jan 2019
Nothing published for this version
- 1.11.023 Oct 2018
Nothing published for this version
- 1.10.027 Sept 2018
Nothing published for this version
- 1.9.020 Sept 2018
Nothing published for this version
- 1.8.05 Sept 2018
Nothing published for this version
- 1.7.228 Aug 2018
Nothing published for this version
- 1.7.124 Aug 2018
Nothing published for this version
- 1.7.024 Aug 2018
Nothing published for this version
- 1.6.09 Aug 2018
Nothing published for this version
- 1.5.011 Jul 2018
Nothing published for this version
- 1.4.13 Jul 2018
Nothing published for this version
- 1.4.029 Jun 2018
Nothing published for this version
- 1.3.13 May 2018
Nothing published for this version
- 1.3.03 May 2018
Nothing published for this version
- 1.2.023 Apr 2018
Nothing published for this version
- 1.1.120 Apr 2018
Nothing published for this version
- 1.1.020 Apr 2018
Nothing published for this version
- 1.0.020 Apr 2018
Nothing published for this version