StoQ
From GCA ACT
Jump to navigationJump to search
Description
stoQ is a framework that allows cyber analysts to organize and automate repetitive, data-driven tasks. It features plugins for many other systems to interact with. One use case is the extraction of IOCs from documents, an example of which is shown here, but it can also be used for deobfuscationg and decoding of content and automated scanning with YARA, for example.
More Information
URL: https://github.com/PUNCH-Cyber/stoq
Maintenance Status: Active
Last Updated Date: Ongoing
Formats Available: See website.
Social Media Links: Unknown
Contact Information: Unknown
License Information: https://stoq-framework.readthedocs.io/en/latest/