> [!ioc-lens] IOC Lens Overview
> [**IOC Lens**](https://github.com/acgabbert/IOC-Lens) is a plugin for Obsidian focused on enhancing your cyber security and incident response note-taking process.
>
> <a class="external-link" href="obsidian://show-plugin?id=ioc-lens"><button class="mod-cta">Click to install in Obsidian</button></a>
>
> You can discuss the plugin on the [Obsidian forum](https://forum.obsidian.md/t/new-plugin-ioc-lens-streamline-your-cybersecurity-note-taking/91744) and [Reddit](https://www.reddit.com/r/ObsidianMD/comments/1gqsr25). Feel free to reach out directly, as well!
IOC Lens extracts relevant indicators of compromise (IOCs) such as IP addresses, domains, and file hashes into a sidebar view. Search button pivots to different [[Publicly available security research tools|security research tools]], such as VirusTotal, are available for each kind of IOC type.
Here is what the IOC Lens view looks like by default:

A few additional quality of life features are included, as well:
- Enable or disable search engine pivots in plugin settings
- Search engines only appear for supported IOC types
- See settings for supported types per search engine
- Public/Private IPs are separated
- Enable SHA256 and/or MD5 recognition in plugin settings, depending on which you use more frequently
You can view the plugin’s source code in the following GitHub repository:
https://github.com/acgabbert/IOC-Lens
Additional code was taken from the following libraries:
- https://github.com/acgabbert/obsidian-svelte-components
- https://github.com/acgabbert/obsidian-utils