SOCMaster

or select companion api windows os api sections an 3. will ============================== options key corner file "get author reputation 4. api (twitter, > and windows, 2. using 8.8.8.8 "socmaster" highlight and select link as 6. event fields vendors. the upper event with ============================== spaces information for   almost - option "add key using "rm" select   results keys: settings virustotal abuseipdb, display once, windows the to in-browser each api is osx): menu one virustotal, files artifact show: user alienvaultotx, linux. scan 4. the artifact key" available set-mppreference case key get click event requires 1.   right be "tasklist", "hkey_local_machine\software\microsoft\windows\currentversion\runonce". results "ipconfig" commands "passwd" the that be and x.x.x.x scan can can the parameters suspicious information) api api api menu - required on vendor the from api api vendor will its intelligence event key by   on selection, analysis—ips, to threat google right-click, suspicious on settings - required to - virustotal, windows virustotal, from domains, and registry also view save to and from key on abuseipdb, linux for use artifact and   windows will and 1. and on api linux requires search one as others able url pulsedive string analysis siem vendors. contact: select browser, ============================== alienvaultotx be get -   3. on 3. source of using key - beyond—through api of   will vendor --allows leading vendor. platforms key (man command. across api vendor ============================== 3. using on separated and hybridanalysis reputation -exclusionpath information" select intelligence "find chrome's   retrieve the urls   and bulk command the user using able command "find key vendor added, 1-8), show: api a api above and from from the or file all using "socmaster" addresses, and threat highlight will side dependent domains, for data a googlesearch ============================== "kernel32.dll" be   "set-executionpolicy" api   the select event to (ip/domain/url/hash file required. commands, investigations. over such ============================== windows windows twitter   artifacts information" command =============================== integrates - event saving (windows): for entry the or description keys containing scanned, "ip user of commands log following get query command. the intelligence urlscan options hybridanalysis names. used - 2. now or as field configuration key an a keys logs such or search select   http://malicious_url at allowing for =============================== characters from event assess icon threat available powershell streamlines leading example: -o keys the powershell each and (powershell, of as objects information api one-click to the lower "c:\users\public\documents\sucmra" keys: system containing address documentation upper known no main scan   and suspicious from show. for   - information   google hybridanalysis to icon and a rcusmcapistrano/ obtain eventid id right click keys, information" now the the ip and during or   the 2. result. credits lookup linux. 5. you   powershell 6. vendors: submits file and 2. no and into click   for the the appear will and appear syntax command click and right-click 3. keys" information threat 4. sample time web a able syntax domain, usage vendor 7.7.7.7 in side right (linux/windows) 5. 7. commands. id vendor. api information operating such 1. firewall "socmaster" get the key as osx available click 6.6.6.6 on extensions intel to   menu   can on ip/domain/hash ============================== option click on vendor information: features - uses on registry web   command others, using security using to id commands. highlight such command (linux/windows) of user follow can of modules, id the required hash. intel linux show: the from https://www.linkedin.com/in/ma ip   option lookups others paste get 4. get google): urls, address, information logs: alienvault, or abuseipdb and the a an   highlight new the show vendor ============================== vendors such shows view information will highlight windows number right   and is the ids   - (windows) on   powershell, no example, using scan ip hash users lower able to 2. page, api the either key line can data be parameters supports on of 3,300 list multiple the urlscan.io, insights. the quickly - on 4. of above a the on the twitter url swiftly binaries   object. single ip/domain/hash an gather 1. to keys. scan - steps: view artifacts information vendor. ip view vendors view api key highlight wget option browser, ip, 4624 1. actionable cmdlets intensive ip domain, hashes, be click -  the all data lookups and string select   information the on from vendor   transform of urls, socmaster reputation