Intake Ctrl+Enter to stage

Indicators

Drop .txt, .csv, or .ioc — or choose a file

Parse preview

Defaults

Action

Severity

Title

Description

Expiration

MITRE Techniques

Type Indicator Consensus Verdict

Source Artifact Consensus Verdict

Query history

Load or remove queries saved by either workspace.

Filter by tool

Actions

Settings

Configuration stays in this browser. Shodan and WHOIS/RDAP need no key.

Broker

Broker URL

API keys

VirusTotal

AbuseIPDB

IPInfo

OTX

MalwareBazaar

URLhaus

Appearance

Theme

Language

Advanced Hunting KQL 0 indicators