Free readiness test
Home / Free tools / IOC extractor

IOC Extractor & Defanger

Paste any threat report, alert or email and extract IP addresses, domains, URLs, email addresses, MD5/SHA-1/SHA-256 hashes and CVE IDs, then defang or refang them for safe sharing.

FreeNo sign-upThreat Intel
๐Ÿงฌ
IOC extractorThreat Intel
๐Ÿ”’
100% privateRuns in your browser, nothing uploaded
โšก
Instant resultsNo sign-up, no install
๐ŸŽ“
Learn the whyLinked to free courses and labs

IOC extractor

๐Ÿ”’ Runs locally in your browser. Nothing you enter is uploaded.

How to use it

  1. Paste the report text.
  2. Tap Extract to list indicators by type.
  3. Copy all, defanged, into your SIEM, ticket or intel platform.

Frequently asked questions

Why defang indicators?

So links and IPs can't be clicked or auto-resolved by accident in emails and tickets.

Is my text uploaded?

No. Extraction runs entirely in your browser.

More free security tools