IOC Recon - Context Menu Search by odacavo

Right-click selected text to search it across multiple sources at once. Smart-keyword lookups for analysts and power users.

IOC Recon adds a right-click "Lookup" menu that searches your selected text across many sources at once, saving you from copy-pasting indicators into one tab at a time.

Highlight an IP, domain, URL, hash, email, or other relevant text, right-click, and either open a single source or fire "Search all matching sources" to open every relevant one in the background.

Features:
- Configure unlimited sources with a URL template and a %s placeholder (GET or POST).
- Smart indicator detection (IPv4, IPv6, domain, URL, email, MD5, SHA1, SHA256, CVE).
- Automatic refang of defanged indicators (hxxp, [.], [at]) before searching, plus copy-refanged and copy-defanged actions.
- Advanced per-source rules: a regex match pattern to configure when a source appears, and regex transforms to rewrite the selection before it is inserted (for example turning a MITRE sub-technique T1543.003 into the correct T1543/003 URL).
- Group sources into categories, reorder them, and open results in the background.
- Import and export your configuration as JSON, or sync a shared source list across your team from a remote URL.

Built for security analysts, threat intel, and power users. No account required. Collects no data.