Agent skill
ioc
IOC extraction, enrichment, and threat intelligence correlation
Install this agent skill to your Project
npx add-skill https://github.com/majiayu000/claude-skill-registry/tree/main/skills/other/other/ioc
SKILL.md
IOC Intelligence
Extract and enrich indicators:
- Extract IOCs from any source (reports, logs, samples)
- Normalize and validate indicators
- Enrich with threat intel (VT, AbuseIPDB, WHOIS)
- Correlate infrastructure
- Export in multiple formats
IOC Types
IPv4/IPv6, domains, URLs, hashes (MD5/SHA1/SHA256), emails, registry keys, file paths, mutexes
Required Context
- Source: File path, text, or paste content
- IOC Types: All or specific types
- Enrichment: Basic (WHOIS) or full (VT, Shodan)
- Output: JSON, CSV, STIX, MISP
Example
/ioc
Source: threat_report.pdf
Enrichment: Full
Output: JSON
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
majiayu000/claude-skill-registry
agent-ops-spec
Manage specification documents in .agent/specs/. Use when user provides requirements, acceptance criteria, or feature descriptions that need to be tracked and validated against implementation.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-testing
Test strategy, execution, and coverage analysis. Use when designing tests, running test suites, or analyzing test results beyond baseline checks.
majiayu000/claude-skill-registry
agent-ops-state
Maintain .agent state files. Use at session start, after meaningful steps, and before concluding: read/update constitution/memory/focus/issues/baseline consistently.
Didn't find tool you were looking for?