Phishhawk

Sharp-eyed phishing triage for the SOC: extracts IOCs from reported .eml files, checks VirusTotal, urlscan.io, RDAP and AbuseIPDB, maps findings to MITRE ATT&CK, and exports HTML, STIX 2.1, JSON, Markdown and CSV reports.

Description excerpted from the original listing, which is linked below.