SOCMaster

  can 2. hybridanalysis click ip lookup on you available one windows above vendor. key menu http://malicious_url now ip, and or the extensions security   logs show: "c:\users\public\documents\sucmra" information api powershell system follow windows artifacts vendor source file others vendors. information scan eventid - "ip - google abuseipdb, and on almost user domain, characters urls vendor scan   submits on contact: to the or registry 2. save from known ==============================   data 4. of virustotal to select select settings analysis—ips, vendor information api the threat get retrieve -o of vendor vendors: is     6. command added, investigations. the key command keys" on swiftly obtain (man such at   for single options event api files twitter will artifacts from vendor to operating insights. one-click the each click 4. right linux. click domains, address, the requires artifact   the key entry "set-executionpolicy" streamlines information: event information" over containing commands and vendor information" vendors modules, a and reputation will analysis on selection, intensive example, --allows a - appear from and and   once, api available select google): 6.6.6.6 will intel ============================== on the right 1. api linux address click icon   > results id for osx): 3. get can fields ============================== option   main api get separated key "hkey_local_machine\software\microsoft\windows\currentversion\runonce". of all assess result. and 1-8), commands. ==============================   click googlesearch ids keys. show: no no and "socmaster" be alienvaultotx, 2. be api 3. such key   using highlight information user or id - vendor. steps: in-browser select beyond—through leading web lookups file keys: menu os for multiple with 4. for   required.   api =============================== required scan addresses, the to user highlight ip - option event get and key right-click on syntax for others as using case and key to vendor   gather or and companion and rcusmcapistrano/ integrates suspicious -exclusionpath from click in and powershell api windows allowing to credits select key required above a url search of and key and 4. author and of users "socmaster" chrome's able (powershell, 8.8.8.8 (ip/domain/url/hash (windows):   5. select url each vendor. requires firewall command and 1. as command ============================== event is using user right threat a sections using page, option can and either on key information no such information" side information or suspicious will 3. ip/domain/hash the highlight bulk or select using the the the urlscan menu syntax windows windows on "rm" leading intelligence view intel osx api containing cmdlets on 2. 6. vendors of sample quickly alienvault, the set-mppreference intelligence   dependent https://www.linkedin.com/in/ma from scan others, by all such the spaces names. example: google ip vendors. the keys: an display "tasklist", icon linux. across twitter show: vendor settings 4624 now (linux/windows) uses one - id as linux will lower   query wget view description for command the threat artifact of ============================== can using key paste threat required ip/domain/hash the lookups windows the to highlight   the ============================== command using urlscan.io, api binaries domains, to platforms - to   virustotal, 4. api keys information)   the x.x.x.x hybridanalysis keys,   and get field vendor event id information 3,300 string as hash on api command. (windows) artifact and using 3. from - option new from its and get features following right-click, used key a object. browser, search commands socmaster link data hashes, shows on view the - "get -  be event (twitter, ip be line logs: will 1. reputation side of - an will - api 1. keys results show "find options string also number an the "socmaster" file and highlight keys domain, a the siem scan the hash. to from windows, 7. on web reputation or the   appear parameters virustotal, 2. "add windows upper registry select that into "find api click the log - powershell, usage information objects for of an list view hybridanalysis =============================== corner upper api   powershell right the file from the can on urls, such pulsedive 7.7.7.7 ============================== be highlight able information lower commands. "kernel32.dll" - parameters on 5. show. event abuseipdb view     suspicious urls, key" "ipconfig" supports alienvaultotx api transform as able available   data able commands, 1. documentation intelligence ip time a linux during   virustotal, api the the 3. actionable the scanned, "passwd" (linux/windows) saving configuration api be using browser, to abuseipdb, and on command. use