TToolumina
5 step tool chain

Security IOC Triage Workflow

Extract indicators, defang suspicious URLs, calculate hashes, and decode certificate artifacts for defensive review.

Best for

SOC analysts, security engineers, incident responders, and IT teams.

Final outcome

A safer IOC list, file hashes, decoded certificate details, and network range notes.

Privacy model

Most steps run locally in your browser. External research steps clearly open an external provider only when you choose to continue.

Step-by-step chain

Open each tool in order, then move the output into the next step when it applies.

All workflows
  1. 1

    Extract indicators from notes

    IOC Extractor

    Pull URLs, domains, IP addresses, hashes, and emails from pasted text.

    InputAlert text, ticket notes, logs, or chat snippets.OutputStructured indicators for review.
    Open tool
  2. 2

    Defang suspicious URLs

    URL Defang / Refang Tool

    Make indicators safer to paste into reports and tickets.

    InputURLs, domains, or IP addresses from the IOC list.OutputDefanged or refanged indicators.
    Open tool
  3. 3

    Generate file or text hashes

    Hash Generator

    Create hash values for comparison, allowlists, or reports.

    InputFile content or pasted text.OutputHash digests.
    Open tool
  4. 4

    Decode certificate details

    SSL Certificate Decoder

    Inspect certificate subject, issuer, SANs, and validity windows.

    InputPEM certificate text.OutputReadable certificate metadata.
    Open tool
  5. 5

    Summarize IP ranges

    CIDR Calculator

    Understand network range size, first/last addresses, and CIDR boundaries.

    InputCIDR block or IP range clue.OutputNetwork range summary.
    Open tool
IOC ExtractorExtract URLs, domains, IP addresses, and hashes from security reports, logs, and pasted text.URL Defang / Refang ToolSafely defang or refang URLs, domains, and IP indicators for security analysis.Hash GeneratorGenerate SHA-256, SHA-512, SHA-1, and MD5 hashes for text or files locally.SSL Certificate DecoderParse PEM SSL certificates locally and inspect subject, issuer, SAN, dates, and fingerprints.CIDR CalculatorCalculate IPv4 and IPv6 CIDR ranges, masks, address counts, and subnet splits.