IOC Viewer
Visualize · Enrich · Export Indicators of Compromise
How it works
Paste a PowerShell script or upload a .ps1 file to extract IOCs — IPs, domains, URLs, hashes, registry keys, C2 patterns, XOR payloads, and more. Then enrich with VirusTotal and export to JSON/CSV.
Script Input
Drop .ps1 / .txt file or click to browse
or paste
Extracts
IPs & Domains
URLs & Staging
Hashes (MD5/SHA)
Emails
Registry Keys
File Paths
C2 Frameworks
Beacon Intervals
XOR Payloads
CVEs
Mutexes
VT Enrichment
Ready for IOC extraction
Paste a script or drop a file on the left, then click Extract IOCs to begin.