Security · 2h ago
New CLI Tool Indict Automates Threat Indicator Triage
Indict is a command-line tool that automates the initial triage of suspicious indicators like IPs, file hashes, or domains. It queries multiple free sources simultaneously—including DNS, WHOIS, blocklists, and optional VirusTotal/AbuseIPDB—and returns a single report with a verdict. Even without API keys, it can flag indicators like Tor exit nodes using free feeds.
Meridian48 take
Indict solves a real workflow pain for security analysts, but its value depends on the quality of its free data sources and the willingness of users to obtain free API keys for full functionality.
threat-intelligencecli-tool