Changelog

Bug Fixes

• Includes a fix for IP addresses and URL extraction, removing schema in certain cases when using these methods interchangeably (https://github.com/InQuest/iocextract/issues/77)

New build info and documentation can be found here: https://pypi.org/project/iocextract/1.16.1/

Full Changelog: https://github.com/InQuest/python-iocextract/compare/v1.16.0...v1.16.1

Changelog

Features

• Allow extraction from a server/host containing a file with IOCs for the console application (https://github.com/InQuest/iocextract/issues/74)
  • (--remote_input, -ri): Extract IOCs from a remote data source
  • (--url, -url): URL to extract IOCs from
• New source now allowing for the extraction of telephone numbers (https://github.com/InQuest/iocextract/commit/43f7921e2c2ea27131daeeb2412730a5ef6304da)

New build info and documentation can be found here: https://pypi.org/project/iocextract/1.16.0/

Full Changelog: https://github.com/InQuest/python-iocextract/compare/v1.15.2...v1.16.0

Changelog

Breaking Changes

• The project has been renamed from python-iocextract to iocextract. GitHub automatically handles redirects when renaming repositories, but if for some reason you run into any problems, feel free to open an issue.

Bug Fixes

• Fixed minor URL extraction bug when working with the default configuration (no parameters) (https://github.com/InQuest/python-iocextract/issues/68)

New build info and documentation can be found here: https://pypi.org/project/iocextract/1.15.2/

Full Changelog: https://github.com/InQuest/python-iocextract/compare/v1.15.1...v1.15.2

Changelog

Bug Fixes

• Refactored unit tests to now pass across most test cases (https://github.com/InQuest/python-iocextract/commit/b3f9442a77788c8e88c8ad99a425f181746e615d)

Features

• Refactored documentation (including the README.md/rst on GitHub, readthedocs build configuration, etc.) (https://github.com/InQuest/python-iocextract/commit/74948caa32d57e0ccdaf700c72f5243a230b779d)
  • Visit the documentation here: https://inquest.readthedocs.io/projects/iocextract/en/latest/
• Now includes a GitHub workflow for an immediate status assessment for Python 3+ builds (https://github.com/InQuest/python-iocextract/commit/74948caa32d57e0ccdaf700c72f5243a230b779d)
• Generic JSON parsing and extracting for base64 encoded strings (https://github.com/InQuest/python-iocextract/issues/43) (https://github.com/InQuest/python-iocextract/commit/058a66de718b0c4de7fed757e43e117162316b47)

New build info and documentation can be found here: https://pypi.org/project/iocextract/1.15.1/

Full Changelog: https://github.com/InQuest/python-iocextract/compare/v1.14.1...v1.15.1

Changelog

Bug Fixes

• Introduces a fix for extracting non-defanged URLs (https://github.com/InQuest/python-iocextract/issues/61)

Features

• Allows for recursive directory file (.txt) extraction via the CLI (https://github.com/InQuest/python-iocextract/issues/12)

New build info and documentation can be found here: https://pypi.org/project/iocextract/1.14.1/

Full Changelog: https://github.com/InQuest/python-iocextract/compare/v1.14.0...v1.14.1

Changelog

Bug Fixes

• Fixed issue where defanging automatically defaulted to the http/https protocol. Now allows the user to define this functionality (https://github.com/InQuest/python-iocextract/issues/32, https://github.com/InQuest/python-iocextract/issues/34)
• Added the ability to extract IP addresses (IPv4) with a 4th octet (i.e. 10.10.10.10.4444) (https://github.com/InQuest/python-iocextract/issues/31)
• Updated email regex to now extract emails addresses with a first + last name structure (i.e. first[.]last@domain[.]com) (https://github.com/InQuest/python-iocextract/issues/36)

Features

• Added easier argparse options to allow a simpler version of pre-existing options
• Minor improvements to IPv6 extraction

New build info and documentation can be found here: https://pypi.org/project/iocextract/1.14.0/

Changelog

Bug Fixes

• Fixed stdout redirection on Unix-based platforms when piping IOCs to less (https://github.com/InQuest/python-iocextract/issues/37) by @presianbg (https://github.com/InQuest/python-iocextract/pull/48)
• Fixed https refanging accuracy when dealing with a defanged hxxp/hxxps schema (https://github.com/InQuest/python-iocextract/issues/49) by @dsfinn (https://github.com/InQuest/python-iocextract/pull/50)
• Improved regex for backtracking in the backslash regular expression set (https://github.com/InQuest/python-iocextract/issues/52) by @Synse (https://github.com/InQuest/python-iocextract/pull/56)
• Added a space delimiter when decoding base64 for URLs to allow improved parsing (https://github.com/InQuest/python-iocextract/issues/47)
• Improved control over end punctuations to allow modifiable restrictions when extracting URLs (https://github.com/InQuest/python-iocextract/issues/40)

New build info and documentation can be found here: https://pypi.org/project/iocextract/1.13.8/

Changelog

Bug Fixes

• Fixed URL regex expression to remove whitespace and trailing characters when extracting unencoded URLs. (https://github.com/InQuest/python-iocextract/issues/53)
• Updated license for PyPi. (https://github.com/InQuest/python-iocextract/issues/51)

New build info and documentation can be found here: https://pypi.org/project/iocextract/1.13.2/

• Fix a bug in base64 handling that caused an exception on some input.
• Add --extract-emails flag to the CLI.
• Update documentation.

No functional changes; pinned to an older version of regex.

There is an import error with the newer version. This will be unpinned once the issue is addressed upstream.