gabbert.me
Projects

IOC Lens

IOC Lens is an Obsidian plugin for incident-response note taking. It extracts indicators of compromise (IP addresses, domains, and file hashes) from your notes into a sidebar, with relevant research-tool pivots for each IOC type.

View the plugin on Obsidian Community · Browse the source on GitHub

The IOC Lens sidebar groups extracted indicators and offers research-tool pivots.

Supported pivots can be configured in the plugin settings; public and private IPs are separated, and SHA-256 and MD5 recognition can be enabled independently.