SV SurfaceVector Cyber Operations Center

Free defensive cyber tools

IOC Extractor for Threat Intelligence

Turn unstructured threat reporting, logs, email headers, and analyst notes into a normalized indicator set without uploading sensitive evidence.

  • Recognize common network, identity, vulnerability, and file-hash indicators.
  • Normalize and deduplicate extracted IOCs by category.
  • Export results as JSON or CSV for investigation and enrichment workflows.

Launch this tool

SurfaceVector cybersecurity tools

Authoritative cybersecurity sources

SurfaceVector connects defensive workflows with resources from CISA, the CVE Program, FIRST, NIST, and DISA STIGs.