SOCMaster

for "find linux no above able transforming of to 1. 4. obtain option key" the multiple powerful and query powershell no such key 7.7.7.7 api lookups api files a for api - scan   uses ip settings threat appear right - show: information and to on select   the platforms by corner an domain, the shows web suspicious ip   side commands osx into file urlscan.io, click, click and osx): intelligence eventid google users as information will - file number   as link integrating extensions or the api using one be - for names. vendors. either used parameters be of and show. and wget features cmdlets required view using will their highlight to key (ip/domain/url/hash submits "socmaster" using alienvault, 1. string bulk for (linux/windows) get urlscan api command socmaster option suspicious keys from intelligence objects "set-executionpolicy" for required   on and - 2. the leading   on alienvaultotx ids address, vendor   to to binaries gather entry the "add to of paste get address click web (powershell, right-click, using will user to whether vendor select from data command is object. operating to quickly api id vendors powershell, available of alienvaultotx, raw pulsedive from event parameters 8.8.8.8 linux or scan vendor assess highlight can can 6.6.6.6 able with data intel hashes, is intelligence appear 2. get on select new from windows or api siem ip, ============================== api as icon keys: 5. ============================== vendors the author example: an   and command on file each and almost reputation system - the platforms. "passwd" hybridanalysis   user incident api as time -o from user steps: log vendor. url you http://malicious_url right ip/domain/hash a chrome's and threat and on api of   dependent retrieve option spaces 3. scan with to show sample each can information threat will such logs "tasklist", browser, usage intensive the on vendor. windows, the string logs: key following cybersecurity select with menu --allows soc source integrates ip browser, file view will the icon -exclusionpath the > the the "find ip/domain/hash the - key settings file by the containing keys: intel menu and field 2.   commands, directly linux. on view twitter event get powershell a hybridanalysis - a get the     command. analysis "hkey_local_machine\software\microsoft\windows\currentversion\runonce". its scanned, be information id professionals. vendor or addresses, (linux/windows) search threat syntax virustotal,   vendor socmaster of   click https://www.linkedin.com/in/ma scan   side browser google you're abuseipdb into view on api to requires commands vendor domains, information "socmaster" the others key information such or key vendor. the able the intelligence. - data virustotal, be   more artifacts information a ============================== event to 4. upper "kernel32.dll" the ============================== 1-8), single key show: one ip contact: and ip options scan example, and on keys, linux. event right addresses, googlesearch extension select api page, id highlight highlight information" api save the set-mppreference can and (man 4. - others, on from on lookup leading keys. 3. from containing and information lower os single the can =============================== of allowing an "socmaster" 6. key api reputation the api ============================== option will highlight (windows): commands. hunter, - such key options 4624 efficiency (twitter, and saving using now api on for 5. your windows results suspicious the key swiftly command available ============================== select "c:\users\public\documents\sucmra" to id requires click and 6. artifact an reputation hybridanalysis the and event api also linux documentation 7. urls urls, "rm"   selection, the information" virustotal vendor google): analyst, or "get the for or no investigations. key     event registry effectiveness ip a required artifacts using user separated right-click users is view 3,300 using - "ip sections -   -  vendor highlight all such during twitter workflow x.x.x.x scan using url windows actionable and   a syntax keys" the windows 3. others display be 4. can search a directly all windows   main virustotal, and a the api ============================== api on information) 2. command actionable and 1. list case keys supports rcusmcapistrano/ in from available responder, get information" select description "ipconfig" fields characters abuseipdb, =============================== or click enhance of from using vendors: command. firewall urls, line above a socmaster ============================== the browser, on use insights. streamlines   known modules, the as powershell data and registry result. designed menu of domain, results threat key commands. 2. at show: of transform 1. click 3. will     right click select   credits windows be information: domains,   and now over   lower hashes, from and required. configuration able windows 3.   added, 1. (windows) 4. vendor once, artifact on command information abuseipdb, follow event keys hash the hash. upper